Package · Maven

org.apache.activemq:activemq-jaas

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium —

CVE-2015-6524

Improper Input Validation in Apache ActiveMQ

The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: thi…

activemq activemq org.apache.activemq:activemq-broker org.apache.activemq:activemq-jaas Debian Ubuntu Maven

Aug 24, 2015
High —

CVE-2014-3612

Improper Authentication in Apache WSS4J

The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an una…

activemq activemq org.apache.activemq:activemq-broker org.apache.activemq:activemq-jaas Debian Ubuntu Maven

Aug 24, 2015