~ / search / GHSA-q7fr-vqhq-v5xr

GHSA-q7fr-vqhq-v5xr

Apache ActiveMQ Artemis vulnerable to Improper Access Control

Source: GitHub Advisory Database (reviewed) High CVE-2021-26118

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.activemq:artemis-openwire-protocol < 2.16.0 2.16.0

Details

As written in the advisory (Markdown source, shown as plain text).

While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error.

References

External links from the advisory. They lead to third-party sites.