This script is Copyright (C) 2010-2016 Tenable Network Security, Inc.
The remote web server is affected by an information disclosure
The version of ActiveMQ hosted on the remote web server is affected by
a source code disclosure vulnerability in the Jetty ResourceHandler
when handling requests to a JSP file with additional leading slashes.
A remote attacker can exploit this to disclose the source code of
pages, which may contain passwords and other sensitive information.
See also :
Either upgrade to the latest ActiveMQ 5.4 snapshot or apply the
workaround described in the bug report.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.3
Public Exploit Available : true
Family: CGI abuses
Nessus Plugin ID: 45623 (activemq_doubleslash_disclosure.nasl)
Bugtraq ID: 39636
CVE ID: CVE-2010-1587
Upgrade to Nessus Professional today!
Start your free Nessus Cloud trial now!
Begin Free Trial
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.