PT-2016-4410
CVE-2016-0782
·
تاريخ النشر
2016-08-05
·
تاريخ التحديث
2022-05-14
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Apache ActiveMQ versions 5.0.0 through 5.11.3
Apache ActiveMQ versions 5.12.0 through 5.12.2
Apache ActiveMQ versions 5.13.0 through 5.13.1
Description
The administration web console in Apache ActiveMQ allows remote authenticated users to conduct cross-site scripting (XSS) attacks. This can lead to obtaining sensitive information from a Java memory dump via vectors related to creating a queue.
Recommendations
For Apache ActiveMQ versions 5.0.0 through 5.11.3, update to version 5.11.4 or later.
For Apache ActiveMQ versions 5.12.0 through 5.12.2, update to version 5.12.3 or later.
For Apache ActiveMQ versions 5.13.0 through 5.13.1, update to version 5.13.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾