The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The LDAPLoginModule implementation in the Java Authentication and Authorization Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators in usernames, which allows remote attackers to obtain credentials via a brute force attack. NOTE: this identifier was SPLIT from CVE-2014-3612 per ADT2 due to different vulnerability types.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Activemq | — | Upgrade Apache ActiveMQ to the latest version | Jan 9, 2024 | Aug 24, 2015 |
| Debian | — | Upgrade activemq | Jul 30, 2024 | Aug 24, 2015 |
| Ubuntu | — | Upgrade activemq | Nov 19, 2024 | Aug 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub