low2.7
CVE-2015-7559
It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class.
Impact
It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Activemq | before 5.14.5 from 5.15.0 before 5.15.5 |
| Redhat | Jboss A-Mq | Versions 6.2.1, 6.3 |
| Redhat | Jboss Fuse | Version 6.3 |