blob: c4aecf079deb0ab127979f50c08d791f100270ca [file] [log] [blame]
CVE-2015-7559 - DoS in client via shutdown command
Severity: Low
Vendor:
The Apache Software Foundation
Versions Affected:
Apache ActiveMQ 5.0.0 - 5.14.4
Description:
It was found that Apache ActiveMQ client exposed a remote shutdown command in the ActiveMQConnection class. An attacker could use this flaw to achieve denial of service on a client.
Mitigation:
Upgrade to Apache ActiveMQ 5.14.5.
Credit:
Thanks to Chess Hazlett for reporting this vulnerability