Missing Authorization

Apache ActiveMQ Artemis is vulnerable to Missing Authorization. The vulnerability is due to insufficient authentication and authorization checks when processing OpenWire RemoveSubscriptionInfo commands, which allows a remote attacker to delete queues on the Artemis broker before authentication or...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletion of a queue by sending a crafted command before authentication and...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-openwire-protocol is a package for activemq. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletio...

Missing Authentication for Critical Function

Overview org.apache.artemis:artemis-jakarta-openwire-protocol is a To support OpenWire clients from an embedded broker deployed in a Jakarta environment e.g. Spring Boot 3 Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletion of a queue by sending a crafted command before authentication and...