Red Hat Security Advisory

RHSA-2015:0137

Red Hat JBoss Fuse/A-MQ 6.1.0 security and bug fix update

Released 2015-02-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss A-MQ 6.1
Red Hat JBoss Fuse 6.1

Fixes 2 records

TI-2014-02923 CVE-2014-3600 · GHSA-4vhf-2hv7-8mrx

XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows…

MEDIUM 53

XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08181 Published 2017-10-27 Partial fix · 5.10.1 CWE-611

TI-2014-02933 CVE-2014-3612 · GHSA-72m6-23ff-7q26

The LDAPLoginModule implementation in the Java Authentication and Authorization Service…

MEDIUM 43

The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06903 Published 2015-08-24 Partial fix · 5.10.1 CWE-287