Red Hat Security Advisory

RHSA-2020:3209

AMQ Online 1.5.2 release and security update

Released 2020-07-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat AMQ Online 1.5.2 GA

Fixes 3 records

TI-2020-10739 CVE-2020-13692 · GHSA-88cc-g835-76rp

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

MEDIUM 41

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.04094 Published 2020-06-04 Partial fix · 42.2.13 CWE-611

TI-2020-11190 CVE-2020-14319 · GHSA-73hh-256q-9c49

Cross-site request forgery in AMQ-Online and EnMasse

LOW 26

It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight checks are not instigated or bypassed.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00321 Published 2020-08-03 Fixed CWE-352

TI-2020-11219 CVE-2020-14348 · GHSA-hxj4-cvx4-5vg6

Improper check for unusual conditions in AMQ

LOW 22

It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operat…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00808 Published 2020-09-16 Partial fix CWE-248