Skip to content
OpenAdvisories

Archive

27 January 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.5

    Flaw in ActiveMQ Artemis OpenWire support

    While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject t…

  • High 8.8

    IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-…

  • High 7.5

    Codiad Vulnerable to PHP Magic Hash Vulnerability

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash …

  • High 7.5

    The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences …

  • High 7.5
    CVE-2021-26117 EPSS 11%

    ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

    The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to …