PT-2026-53846 · Apache · Activemq
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Apache ActiveMQ versions prior to 5.19.8
Apache ActiveMQ versions 6.0.0 through 6.2.6
Description
An authorization flaw exists in the handling of temporary destinations. While these destinations are intended to be isolated to the connection that created them, the isolation check is only performed on the client side. This allows a different connection to consume messages from another connection's temporary destination.
Recommendations
Upgrade to version 6.2.7.
Exploit
Fix
DoS
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Activemq