Red Hat Security AdvisoryRHSA-2015:0138
Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 security update
Released 2015-02-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Fuse ESB Enterprise 7.1.0
- Fuse MQ Enterprise 7.1.0
- Fuse Management Console 7.1.0
Fixes 2 records
Priority MEDIUM 53
XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08181 · Published 2017-10-27 · Partial fix · 5.10.1 CWE-611
Priority MEDIUM 43
The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password an…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06903 · Published 2015-08-24 · Partial fix · 5.10.1 CWE-287
