CVE-2018-1297

Name of the Vulnerable Software and Affected Versions Apache JMeter versions 2.x through 3.x

Description The issue concerns an unsecured RMI connection used by Apache JMeter when Distributed Test is enabled. This could potentially allow an attacker to access JMeterEngine and send unauthorized code.

Recommendations For Apache JMeter versions 2.x through 3.x, consider securing the RMI connection to prevent unauthorized access. As a temporary workaround, restrict the use of Distributed Test mode until a secure connection can be established.