ID de Prueba:	1.3.6.1.4.1.25623.1.0.808293
Categoría:	Web application abuses
Título:	Apache ActiveMQ Web Console Cross-Site Scripting Vulnerability
Resumen:	Apache ActiveMQ is prone to a cross-site scripting vulnerability.
Descripción:	Summary: Apache ActiveMQ is prone to a cross-site scripting vulnerability. Vulnerability Insight: The flaw exists due to an improper user data output validation and incorrect permissions configured on Jolokia. Vulnerability Impact: Successful exploitation will allow remote authenticated attackers to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue. Affected Software/OS: Apache ActiveMQ Version 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.1. Solution: Update to version 5.11.4 or 5.12.3 or 5.13.1 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0782 Bugtraq: 20160310 [ANNOUNCE] CVE-2016-0782: ActiveMQ Web Console - Cross-Site Scripting (Google Search) http://www.securityfocus.com/archive/1/537760/100/0/threaded http://packetstormsecurity.com/files/136215/Apache-ActiveMQ-5.13.0-Cross-Site-Scripting.html https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2@%3Ccommits.activemq.apache.org%3E RedHat Security Advisories: RHSA-2016:1424 https://access.redhat.com/errata/RHSA-2016:1424 http://www.securitytracker.com/id/1035328
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.