Fedrick Sequeira

**Name of the Vulnerable Software and Affected Versions** Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0 **Description** An unauthenticated remote attacker can create arbitrary durable queues using the CORE protocol. This allows for unauthorized manipulation of the broker state and may result in a denial of service. **Recommendations** Upgrade Apache Artemis to version 2.57.0. Upgrade Apache ActiveMQ Artemis to version 2.57.0.

**Name of the Vulnerable Software and Affected Versions** Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0 **Description** An unauthenticated remote attacker can craft a CORE protocol `SESSION REATTACH` packet to hijack a live authenticated session. This allows the attacker to steal an existing session, assume ongoing execution of that session, create queues, or delete queues without requiring credentials. **Recommendations** Upgrade Apache Artemis to version 2.57.0. Upgrade Apache ActiveMQ Artemis to version 2.57.0.