Read the docs
Red Hat Security Advisory

RHSA-2022:5101

Red Hat AMQ Broker 7.10.0 release and security update

Released 2022-06-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2019-08009 CVE-2019-10744 · GHSA-jf85-cpcp-j695

Prototype pollution in Snyk lodash

Priority MEDIUM 47

Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.05006 Published 2019-07-25 Partial fix · 4.17.12, 4.17.14 +2 CWE-1321
TI-2022-01699 CVE-2022-1833 · GHSA-fmxp-97xc-fcmx

Incorrect default permissions in AMQ Broker Operator

Priority MEDIUM 40

A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where the AMQ Operator is deployed has access to clusterwide edit rights by che…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00869 Published 2022-06-21 Fixed CWE-276
TI-2022-07145 CVE-2022-22968 · GHSA-g5mm-vmx4-3rg7

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported…

Priority LOW 39

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05666 Published 2022-04-14 Partial fix · 5.3.19, 5.2.21.RELEASE CWE-178
TI-2022-07892 CVE-2022-23913 · GHSA-pr38-qpxm-g88x

Apache ActiveMQ Artemis DoS

Priority LOW 38

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0274 Published 2022-02-04 Partial fix · 2.20.0, 2.19.1 CWE-770