2 matches found
Remote code execution in Apache ActiveMQ
A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack - A remote client could create a...
9.8CVSS3.8AI score0.51225EPSS
SaveExploits0References12Affected Software1
GHSA-WQFH-9M4G-7X6X Remote code execution in Apache ActiveMQ
A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack - A remote client could create a...
9.8CVSS9.7AI score0.51225EPSS
SaveExploits0References11
20