CVE-2021-26118CWE-284

Flaw in ActiveMQ Artemis OpenWire support

published January 27, 2021

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03859 · 90.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-01-27T18:55Z
EPSS history
Timeline
  • 27 JAN 18:55Z
    Flaw in ActiveMQ Artemis OpenWire support
    cvelistv5