ID de Prueba:	1.3.6.1.4.1.25623.1.0.903306
Categoría:	Web application abuses
Título:	Apache ActiveMQ Multiple Vulnerabilities
Resumen:	Apache ActiveMQ is prone to multiple vulnerabilities.
Descripción:	Summary: Apache ActiveMQ is prone to multiple vulnerabilities. Vulnerability Insight: - Flaw is due to an improper sanitation of user supplied input to the webapp/websocket/chat.js and PortfolioPublishServlet.java scripts via 'refresh' and 'subscribe message' parameters - Flaw is due to the web console not requiring any form of authentication for access. - Improper sanitation of HTTP request by the sample web applications in the out of box broker when it is enabled. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site and obtain sensitive information or cause a denial of service. Affected Software/OS: Apache ActiveMQ before 5.8.0. Solution: Upgrade to version 5.8.0 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6092 59400 http://www.securityfocus.com/bid/59400 RHSA-2013:1029 http://rhn.redhat.com/errata/RHSA-2013-1029.html http://activemq.apache.org/activemq-580-release.html https://fisheye6.atlassian.com/changelog/activemq?cs=1399577 https://issues.apache.org/jira/browse/AMQ-4115 https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282 Common Vulnerability Exposure (CVE) ID: CVE-2012-6551 BugTraq ID: 59401 http://www.securityfocus.com/bid/59401 http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html RedHat Security Advisories: RHSA-2013:1029 Common Vulnerability Exposure (CVE) ID: CVE-2013-3060 BugTraq ID: 59402 http://www.securityfocus.com/bid/59402 RedHat Security Advisories: RHSA-2013:1221 http://rhn.redhat.com/errata/RHSA-2013-1221.html
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.