In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI based), jmeter server binds RMI Registry to wildcard host. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "2.2"
},
{
"introduced": "0"
},
{
"last_affected": "2.3"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.1"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.2"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.3"
},
{
"introduced": "0"
},
{
"last_affected": "2.3.4"
},
{
"introduced": "0"
},
{
"last_affected": "2.4"
},
{
"introduced": "0"
},
{
"last_affected": "2.5"
},
{
"introduced": "0"
},
{
"last_affected": "2.5.1"
},
{
"introduced": "0"
},
{
"last_affected": "2.6"
},
{
"introduced": "0"
},
{
"last_affected": "2.7"
},
{
"introduced": "0"
},
{
"last_affected": "2.7-rc3"
},
{
"introduced": "0"
},
{
"last_affected": "2.8"
},
{
"introduced": "0"
},
{
"last_affected": "2.8-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "2.9"
},
{
"introduced": "0"
},
{
"last_affected": "2.9-rc3"
},
{
"introduced": "0"
},
{
"last_affected": "2.10-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "2.10-rc2"
},
{
"introduced": "0"
},
{
"last_affected": "2.11"
},
{
"introduced": "0"
},
{
"last_affected": "2.11-rc2"
},
{
"introduced": "0"
},
{
"last_affected": "2.12"
},
{
"introduced": "0"
},
{
"last_affected": "2.12-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "2.12-rc2"
},
{
"introduced": "0"
},
{
"last_affected": "2.13"
},
{
"introduced": "0"
},
{
"last_affected": "2.13-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "2.13-rc2"
},
{
"introduced": "0"
},
{
"last_affected": "3.0"
},
{
"introduced": "0"
},
{
"last_affected": "3.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.3"
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1287.json"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.3.3-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.3.3-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.3.4-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.3.4-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.3.4-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.5-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.5-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.5-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.5.1-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.5.1-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.5.1-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.6-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.6-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.7-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.7-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.8-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.9-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.9-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "2.11-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.0-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.0-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.0-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.0-rc4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.0-rc5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.1-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.1-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.1-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.1-rc4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.2-rc1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.2-rc2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.2-rc3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.3-rc1"
}
]
}
]