Red Hat Security Advisory

RHSA-2022:6916

Red Hat AMQ Broker 7.10.1 release and security update

Released 2022-10-12 · Red Hat rating Important · View on Red Hat →

Fixed in

AMQ Broker 7.10.1

Fixes 4 records

TI-2022-14972 CVE-2022-33980 · GHSA-xj57-8qj4-c4m6

Apache Commons Configuration insecure interpolation defaults

HIGH 71

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44644 Published 2022-07-06 Partial fix · 2.8.0 CWE-74

TI-2022-08636 CVE-2022-24823 · GHSA-269q-hmxg-m83q

Local Information Disclosure Vulnerability in io.netty:netty-codec-http

MEDIUM 58

Netty is an open-source, asynchronous event-driven network application framework.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01044 Published 2022-05-06 Partial fix · 4.1.77.Final CWE-378

TI-2021-02215 CVE-2021-3121 · GHSA-c3h9-896r-86jm

An issue was discovered in GoGo Protobuf before 1.3.2.

MEDIUM 43

An issue was discovered in GoGo Protobuf before 1.3.2.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03425 Published 2021-01-11 Partial fix · 1.3.2 CWE-129

TI-2022-15956 CVE-2022-35278 · GHSA-cv6r-h2fm-pvrp

HTML Injection in ActiveMQ Artemis Web Console

LOW 31

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01749 Published 2022-08-23 Fixed in 2.24.0 CWE-80