CVE-2024-32114
1 advisory.
Maven/org.apache.activemq:apache-activemq CVE-2024-32114: high 8.8
Apache ActiveMQ's default configuration doesn't secure the API web context
Action: Upgrade org.apache.activemq:apache-activemq to 6.1.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.1.2 | - |
Fixed versions
| 6.1.2 |
Sources
- osv: GHSA-gj5m-m88j-v7c3
- https://nvd.nist.gov/vuln/detail/CVE-2024-32114
- https://github.com/apache/activemq/pull/1201
- https://github.com/apache/activemq/commit/43cc596219b6a8c8b5a54fbda3fb68cb4424f2d0
- https://activemq.apache.org/security-advisories.data/CVE-2024-32114-announcement.txt
- https://github.com/apache/activemq
- https://issues.apache.org/jira/browse/AMQ-9477
CVE-2024-32114 · published · modified · JSON