{"action":"Upgrade org.apache.activemq:activemq-parent to 5.15.12 or later.","affected":[{"fixed":"5.15.12","introduced":"0"}],"component":"org.apache.activemq:activemq-parent","cve_ids":["CVE-2020-13920"],"ecosystem":"Maven","epss":0.04544,"exploited":false,"fixed_versions":["5.15.12"],"ghsa_id":"GHSA-xgrx-xpv2-6vp4","id":"tcs_01M5N9JBAYDPJDAJ7EFPJ3M6N0","modified_at":"2024-03-14T22:03:23.572709Z","published_at":"2022-02-09T22:15:00Z","references":["https://osv.dev/vulnerability/GHSA-xgrx-xpv2-6vp4","https://nvd.nist.gov/vuln/detail/CVE-2020-13920","https://github.com/apache/activemq/commit/359ae4b","https://github.com/apache/activemq/commit/48cd61d","https://github.com/apache/activemq/commit/58382283330f7c7b110c7afd8ef4ca2648786532","https://github.com/apache/activemq/commit/b7dca5e","https://github.com/apache/activemq","https://issues.apache.org/jira/browse/AMQ-7400","https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E","https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7@%3Ccommits.activemq.apache.org%3E","https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E","https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d@%3Ccommits.activemq.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/10/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html","https://www.oracle.com/security-alerts/cpuoct2020.html","http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txt"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-xgrx-xpv2-6vp4","url":"https://osv.dev/vulnerability/GHSA-xgrx-xpv2-6vp4"}],"summary":"Improper Authentication in Apache ActiveMQ"}