| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.activemq:activemq-openwire-generator | ≥ 5.14.0, < 5.15.3 | 5.15.3 |
| org.apache.activemq:activemq-parent | ≥ 5.14.0, < 5.14.6≥ 5.15.0, < 5.15.3 | 5.14.65.15.3 |
| activemq | ≥ 5.14.0, ≤ 5.15.2 |
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free