Improper Authorization vulnerability in Apache ActiveMQ. An authenticated low-privilege Web Console user by default can access /admin/* paths in the...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Improper Authorization vulnerability in Apache ActiveMQ. An authenticated low-privilege Web Console user by default can access /admin/* paths in the Web Console. The default Jetty settings incorrectly did not limit those paths to only admins. This issue affects Apache ActiveMQ: before 5.19.8, from 6.0.0 before 6.2.7. Users are recommended to upgrade to version 6.2.7 or 5.19.8, which fixes the issue.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 activemq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 activemq

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

参照URL

advisory security-tracker.debian.org