Non notée
CVE-2026-49363 An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a…
Description
An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by sending a SUBSCRIBE_TOPOLOGY request prior to authentication. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Artemis 2.50 | 2.50.0 → 2.56.0 | Pas de correctif indiqué |
| Apache ActiveMQ Artemis 1.0 | 1.0.0 → 2.44.0 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Artemis
Les 9 CVE de Apache Artemis →
CVE-2026-49362
An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unauthorized…
Non notée
CVE-2026-49364
An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during…
Non notée
CVE-2026-57822
When the broker is processing message-based management requests, sent by an authenticated messaging client that is…
Non notée
CVE-2026-57967
An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and…
Non notée