CVE-2020-13920
1 advisory.
Maven/org.apache.activemq:activemq-parent CVE-2020-13920: medium 5.9, EPSS 4.54%
Improper Authentication in Apache ActiveMQ
Action: Upgrade org.apache.activemq:activemq-parent to 5.15.12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.15.12 | - |
Fixed versions
| 5.15.12 |
Sources
- osv: GHSA-xgrx-xpv2-6vp4
- https://nvd.nist.gov/vuln/detail/CVE-2020-13920
- https://github.com/apache/activemq/commit/359ae4b
- https://github.com/apache/activemq/commit/48cd61d
- https://github.com/apache/activemq/commit/58382283330f7c7b110c7afd8ef4ca2648786532
- https://github.com/apache/activemq/commit/b7dca5e
- https://github.com/apache/activemq
- https://issues.apache.org/jira/browse/AMQ-7400
- https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7@%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E
- https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d@%3Ccommits.activemq.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2020/10/msg00013.html
- https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txt
CVE-2020-13920 · published · modified · JSON