VULNERABILITY INTELLIGENCE
CVE-2017-15709
CVSS score3.7 LOW
EPSS probability22.78%
CISA KEVNot currently listed
Published2018-02-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor