Improper Authentication in Apache WSS4J

🗓️ 14 May 2022 01:14:52Reported by GitHub Advisory DatabaseType

Improper Authentication in Apache WSS4J. Security vulnerability in Apache ActiveMQ 5.x allows remote attackers to bypass authentication

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by multiple vulnerabilities in IBM Tivoli Integrated Portal (TIP)	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource Apache ActiveMQ vulnerabilities identified with IBM Tivoli Integrated Portal (TIP) v2.2	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Tivoli Integrated Portal (TIP) shipped with Tivoli Business Service Manager (CVE-2015-5254, CVE-2014-3600, CVE-2014-3612, CVE-2014-8110, CVE-2014-3579)	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Directory Integrator is affected by multiple security vulnerabilities	22 Jun 202316:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities	18 Feb 201914:10	–	ibm
zdt	Apache ActiveMQ 5.0.0 - 5.10.0 JAAS LDAPLoginModule empty password authentication Vulnerability	28 Aug 201500:00	–	zdt
Tenable Nessus	Apache ActiveMQ 5.x < 5.10.1 Multiple Vulnerabilities	22 Oct 201500:00	–	nessus
Tenable Nessus	Apache ActiveMQ 5.x < 5.10.1 / 5.11.0 Multiple Vulnerabilities	16 Feb 201500:00	–	nessus
Tenable Nessus	Debian DSA-3330-1 : activemq - security update	13 Aug 201500:00	–	nessus
Tenable Nessus	Puppet Enterprise 3.x < 3.8.1 Multiple Vulnerabilities (Logjam)	23 Jul 201500:00	–	nessus

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-3612
lists	www.lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E
activemq	www.activemq.apache.org/security-advisories.data/CVE-2014-3612-announcement.txt
rhn	www.rhn.redhat.com/errata/RHSA-2015-0137.html
rhn	www.rhn.redhat.com/errata/RHSA-2015-0138.html
seclists	www.seclists.org/oss-sec/2015/q1/427
lists	www.lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
securityfocus	www.securityfocus.com/bid/72513
github	www.github.com/apache/activemq/commit/22f2f3dde757d31307da772d579815c1d169bc39
issues	www.issues.apache.org/jira/browse/AMQ-5345

20 Dec 2023 19:27Current

9High risk

Vulners AI Score9

CVSS 27.5

EPSS0.07181