| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.activemq:activemq-client | < 5.14.5 | 5.14.5 |
| activemq | ≥ 5.15.0, < 5.15.5< 5.14.5 | 5.15.55.14.5 |
| jboss a-mq | = 6.2.1= 6.3 | |
| jboss fuse | = 6.3 |
It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free