VULNERABILITY INTELLIGENCE

CVE-2018-1297

CVSS score9.8 CRITICAL
EPSS probability11.36%
CISA KEVNot currently listed
Published2018-02-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references