CVE-2018-11775

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a…

published September 10, 2018

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06959 · 94.1th percentile
Published
2018-09-10T20:00Z
EPSS history
Timeline
  • 10 SEP 20:00Z
    TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a…
    cvelistv5