Описание
Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms.
An authenticated client can spoof clientId when removing a durable topic subscription.
This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2.
Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.
A flaw was found in Apache ActiveMQ. This vulnerability, stemming from improper input validation in the TopicRegion, allows an authenticated client to impersonate another client's identifier (clientId). This enables the authenticated client to spoof the identity of another client when removing a durable topic subscription, potentially leading to unauthorized actions or misattribution of activities within the messaging system.
Отчет
This vulnerability is assessed as Moderate severity because exploitation requires valid client authentication to the broker, restricting the impact to the disruption of durable topic subscriptions belonging to other clients rather than full system compromise. In typical Red Hat deployments, ActiveMQ brokers are placed within protected internal application tiers with client access restricted to authenticated endpoints. While an authenticated attacker can improperly remove subscription registrations for other client identifiers to disrupt message flow, the issue does not grant administrative control over the broker or permit remote code execution.
Меры по смягчению последствий
Mitigation: For Fedora users running Classic ActiveMQ brokers: upgrade to ActiveMQ 5.19.11 or later (for 5.x series) or 6.3.2 or later (for 6.x series). Red Hat products do not ship vulnerable versions of the Classic ActiveMQ broker at runtime and are not affected by this vulnerability.
Дополнительная информация
Статус:
6.3 Medium
CVSS3
Связанные уязвимости
Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2. Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.
Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2. Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.
Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2. Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.
6.3 Medium
CVSS3