[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-15709/activemq
Salvatore Bonaccorso
carnil at debian.org
Tue Feb 13 20:26:54 UTC 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7f7d0433 by Salvatore Bonaccorso at 2018-02-13T21:26:03+01:00
Add CVE-2017-15709/activemq
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -22429,8 +22429,12 @@ CVE-2017-15711
REJECTED
CVE-2017-15710
RESERVED
-CVE-2017-15709
+CVE-2017-15709 [Information Leak]
RESERVED
+ - activemq <unfixed>
+ [stretch] - activemq <no-dsa> (Minor issue)
+ [jessie] - activemq <not-affected> (Issue introduced with OpenWire protocol support)
+ [wheezy] - activemq <not-affected> (Issue introduced with OpenWire protocol support)
CVE-2017-15708 (In Apache Synapse, by default no authentication is required for Java ...)
NOT-FOR-US: Apache Synapse
CVE-2017-15707 (In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7f7d0433b9c7ca6000a42080275144a0be430c0e
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7f7d0433b9c7ca6000a42080275144a0be430c0e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180213/49c88f1f/attachment.html>
More information about the Secure-testing-commits
mailing list