CVE-2018-11775
- State
- Published
- Severity
- Not scored
- Published
- Sep 10, 2018
- Updated
- Sep 16, 2024
- Reserved
- Jun 5, 2018
Description
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Apache ActiveMQApache Software Foundation |
|
References
- 1041618vdb-entry
- 105335vdb-entry
- [activemq-commits] 20190327 [CONF] Apache ActiveMQ > Security Advisoriesmailing-list
- [activemq-dev] 20190327 Re: Websitemailing-list
- [activemq-commits] 20190327 svn commit: r1042639 - in /websites/production/activemq/content/activemq-website: ./ projects/artemis/download/ projects/classic/download/ projects/cms/download/ security-advisories.data/mailing-list
- [activemq-dev] 20190328 Re: Websitemailing-list
- RHSA-2019:3892vendor-advisory
- [activemq-commits] 20200514 [activemq-website] branch master updated: Publish CVE-2020-1941 security advisorymailing-list
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- http://activemq.apache.org/security-advisories.data/CVE-2018-11775-announcement.txt
- [debian-lts-announce] 20210305 [SECURITY] [DLA 2583-1] activemq security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.