| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.activemq:activemq-client | < 5.15.6 | 5.15.6 |
| activemq | < 5.15.6 | 5.15.6 |
| enterprise repository | = 12.1.3.0.0 | |
| flexcube private banking | = 12.0.1.0= 12.0.3.0= 12.1.0.0= 2.0.0.0= 2.2.0.1 |
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free