CVE-2021-26118
1 advisory.
Maven/org.apache.activemq:artemis-openwire-protocol CVE-2021-26118: high 7.5
Apache ActiveMQ Artemis vulnerable to Improper Access Control
Action: Upgrade org.apache.activemq:artemis-openwire-protocol to 2.16.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.16.0 | - |
Fixed versions
| 2.16.0 |
Sources
- osv: GHSA-q7fr-vqhq-v5xr
- https://nvd.nist.gov/vuln/detail/CVE-2021-26118
- https://github.com/apache/activemq-artemis/commit/e5566d52116d81611d914548adc3cbb14d7118d4
- https://github.com/apache/activemq-artemis
- https://lists.apache.org/thread.html/rafd5d7cf303772a0118865262946586921a65ebd98fc24f56c812574%40%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/rafd5d7cf303772a0118865262946586921a65ebd98fc24f56c812574@%3Cannounce.apache.org%3E
- https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3CCAH%2BvQmMUNnkiXv2-d3ucdErWOsdnLi6CgnK%2BVfixyJvTgTuYig%40mail.gmail.com%3E
- https://security.netapp.com/advisory/ntap-20210827-0002
CVE-2021-26118 · published · modified · JSON