Read the docs
Red Hat Security Advisory

RHSA-2021:0417

Red Hat AMQ Broker 7.8.1 release and security update

Released 2021-02-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 5 records

TI-2021-08068 CVE-2021-26118 · GHSA-q7fr-vqhq-v5xr

Flaw in ActiveMQ Artemis OpenWire support

Priority LOW 39

While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03859 Published 2021-01-27 Partial fix · 2.16.0 CWE-284
TI-2019-08033 CVE-2019-10768 · GHSA-89mq-4x47-5v83

Prototype pollution in AngularJS

Priority LOW 37

In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01982 Published 2019-11-19 Partial fix · 1.7.9 CWE-1321
TI-2020-16544 CVE-2020-27218 · GHSA-86wm-rrjm-8wh8

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2…

Priority LOW 33

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.08277 Published 2020-11-28 Partial fix · 9.4.35.v20201120 CWE-226
TI-2020-06196 CVE-2020-7676 · GHSA-mhp6-pxh8-r675

Cross-site scripting in angular.js

Priority LOW 28

angular.js prior to 1.8.0 allows cross site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01932 Published 2020-06-08 Partial fix · 1.8.0 CWE-79
TI-2020-07155 CVE-2020-8908 · GHSA-5mg8-w23w-74h3

Temp directory permission issue in Guava

Priority LOW 18

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.F…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00924 Published 2020-12-10 Partial fix · 32.0, 32.0.0-android CWE-378