Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.8 release and security update

Red Hat AMQ Broker 7.8 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Moderate: Red Hat Security Advisory: Red Hat AMQ Broker 7.4.5 release and security update

Red Hat AMQ Broker 7.4.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R17 security and bug fix update

An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

com.github.igor-suhorukov:git-configuration (=1.0), com.mageddo:spring-hawtio (>=2.0.2 <=2.3.0_1.2.0) +72 more potentially affected by CVE-2019-9827 via io.hawt:hawtio-core (>=1.1 <=2.4.0)

io.hawt:hawtio-core MAVEN version =1.1, =2.0.2, =2.0.21, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =1.1.0.Beta1, =1.1.0.Beta1, =1.1.0.Beta1, =2.0-M3, =2.17.7 and more Source cves: CVE-2019-9827 Source advisory: OSV:GHSA-MCG9-64CP-XWP7...

CVE-2019-9827

CVE-2019-9827 affects Hawtio up to version 2.5.0, enabling SSRF by triggering an HTTP request from the server to a target via the URI’s initial /proxy/ substring. Public references confirm the issue in Hawtio/Hawtio-related components; Red Hat advisories list hawtio SSRF as a fixed issue in AMQ B...