Към съдържанието
Търсене

CVE-2026-111822: Apache Software Foundation Apache ActiveMQ

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime configuration plugin removes a principal's write grant on a destination, an authenticated connection opened before the change can keep sending to that destination, including through a new anonymous producer, while fresh connections and new explicit producers are denied. This issue affects Apache ActiveMQ: from 6.0.0 before 6.3.3, before 5.19.12; Apache ActiveMQ Runtime Config: from 6.0.0 before 6.3.3, before 5.19.12. Users are recommended to upgrade to version 6.4.0, 6.3.3 or 5.19.12, which fixes the issue.

    Засегнати продукти

    • Apache Software Foundation Apache ActiveMQ: 6.0.0 преди 6.3.3; преди 5.19.12
    • Apache Software Foundation Apache ActiveMQ Runtime Config: 6.0.0 преди 6.3.3; преди 5.19.12

    История

    • 4 ноември 2026 Публикувано

    Други уязвимости в Apache Software Foundation Apache ActiveMQ

    Първоизточници

    CVE-2026-111822: Apache Software Foundation Apache ActiveMQ | freedomonline.bg