2.7
Low
CVE-2015-7559 It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection…
Description
It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ActiveMQ | 5.15.5 | No fix stated |
References
- bugzilla.redhat.com bugzilla.redhat.com
- issues.apache.org issues.apache.org
Timeline
- Published
- Last modified