{"id":"CVE-2015-7559","published":"2019-08-01T00:00:00Z","modified":"2024-08-06T07:51:28Z","title":"It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection…","vendor":"Apache","product":"ActiveMQ","tier":"tail","description":{"text":"It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.","provenance":"source","from":"CVE.org"},"cvss":{"score":2.7,"severity":"LOW","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01966,"percentile":0.80291,"provenance":"source"},"cwes":[{"id":"CWE-306","name":"Missing Authentication for Critical Functionality"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7559","tags":[]},{"url":"https://issues.apache.org/jira/browse/AMQ-6470","tags":[]}],"priority":{"score":17.9,"factors":[{"name":"EPSS percentile","points":16.06},{"name":"CVSS severity","points":1.89}]},"vendorSlug":"apache","affectedVersions":[{"vendor":"Apache","product":"ActiveMQ","versions":["5.15.5"]}],"affected":[{"ecosystem":"Maven","package":"org.apache.activemq:activemq-client","vulnerableRanges":["<5.14.5"],"patched":["5.14.5"],"from":["GHSA-jvpp-hxjj-5ccc"],"provenance":"source"}],"euvd":{"id":"EUVD-2019-0637","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2016-0782","published":"2016-08-05","fixed":"5.13.2","kev":false},{"cve":"CVE-2016-3088","published":"2016-06-01","fixed":"5.14.0","kev":true},{"cve":"CVE-2016-6810","published":"2018-01-10","fixed":"5.14.2","kev":false,"link":{"from":"CVE-2016-6810","to":"CVE-2015-7559","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.activemq:activemq-client","fromFixed":"5.14.2","toFixed":"5.14.5","daysApart":568}]}},{"cve":"CVE-2015-7559","published":"2019-08-01","fixed":"5.14.5","kev":false},{"cve":"CVE-2018-11775","published":"2018-09-10","fixed":"5.15.6","kev":false},{"cve":"CVE-2019-0222","published":"2019-03-28","fixed":"5.15.9","kev":false},{"cve":"CVE-2023-46604","published":"2023-10-27","fixed":"5.18.3","kev":true}],"package":"Maven:org.apache.activemq:activemq-client"}}