Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3612HistoryAug 24, 2015 - 2:59 p.m.
CVE-2014-3612
2015-08-2414:59:00
Debian Security Bug Tracker
security-tracker.debian.org
11
0.009 Low
EPSS
Percentile
82.9%
The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6524 for the use of wildcard operators in usernames.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | activemq | < 5.6.0+dfsg1-4 | activemq_5.6.0+dfsg1-4_all.deb |
| Debian | 11 | all | activemq | < 5.6.0+dfsg1-4 | activemq_5.6.0+dfsg1-4_all.deb |
| Debian | 10 | all | activemq | < 5.6.0+dfsg1-4 | activemq_5.6.0+dfsg1-4_all.deb |
| Debian | 999 | all | activemq | < 5.6.0+dfsg1-4 | activemq_5.6.0+dfsg1-4_all.deb |
| Debian | 13 | all | activemq | < 5.6.0+dfsg1-4 | activemq_5.6.0+dfsg1-4_all.deb |
Related
ubuntucve
ubuntucve
CVE-2014-3612
2015-08-24 00:00:00
CVE-2015-6524
2015-08-24 00:00:00
github
github
Improper Input Validation in Apache ActiveMQ
2022-05-17 03:22:06
Improper Authentication in Apache WSS4J
2022-05-14 01:14:52
prion
prion
Authentication flaw
2015-08-24 14:59:00
Authentication flaw
2015-08-24 14:59:00
cve
cve
CVE-2015-6524
2015-08-24 14:59:00
CVE-2014-3612
2015-08-24 14:59:00
debiancve
debiancve
CVE-2015-6524
2015-08-24 14:59:00
osv
osv
Improper Authentication in Apache WSS4J
2022-05-14 01:14:52
Improper Input Validation in Apache ActiveMQ
2022-05-17 03:22:06
activemq - security update
2015-08-07 00:00:00
openvas
openvas
Apache ActiveMQ < 5.10.1 Multiple Security Vulnerabilities - Linux
2017-11-07 00:00:00
Apache ActiveMQ < 5.10.1 Multiple Security Vulnerabilities - Windows
2017-11-07 00:00:00
Fedora Update for activemq FEDORA-2015-701
2015-10-05 00:00:00
nessus
nessus
Fedora 22 : activemq-5.6.0-12.fc22 (2015-701a1e1a5f)
2016-03-04 00:00:00
Fedora 23 : activemq-5.6.0-12.fc23 (2015-5622085024)
2015-10-05 00:00:00
Apache ActiveMQ 5.x < 5.10.1 Multiple Vulnerabilities
2015-10-22 00:00:00
zdt
zdt
fedora
fedora
[SECURITY] Fedora 23 Update: activemq-5.6.0-12.fc23
2015-10-03 18:10:54
[SECURITY] Fedora 22 Update: activemq-5.6.0-12.fc22
2015-10-04 22:54:29
redhat
redhat
debian
debian
[SECURITY] [DSA 3330-1] activemq security update
2015-08-07 21:08:55
securityvulns
securityvulns
[SECURITY] [DSA 3330-1] activemq security update
2015-08-24 00:00:00
