Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:06:32 +0000 BIT-activemq-2021-26117 — ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind https://cve.radiocsirt.org/vuln/bit-activemq-2021-26117 <p><strong>Affected:</strong> Bitnami: activemq</p> <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> <p><strong>Affected:</strong> Bitnami: activemq</p> <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> https://cve.radiocsirt.org/vuln/bit-activemq-2021-26117 cnvd-2021-20281 https://cve.radiocsirt.org/vuln/cnvd-2021-20281 cnvd-2021-20281 https://cve.radiocsirt.org/vuln/cnvd-2021-20281 EUVD-2026-24971 https://cve.radiocsirt.org/vuln/euvd-2026-24971 EUVD-2026-24971 https://cve.radiocsirt.org/vuln/euvd-2026-24971 fkie_cve-2021-26117 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26117 <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-26117 GHSA-9mgm-gcq8-86wq — Improper Authentication in Apache ActiveMQ and Apache Artemis https://cve.radiocsirt.org/vuln/ghsa-9mgm-gcq8-86wq <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-parent, Maven: org.apache.activemq:apache-artemis</p> <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> <p><strong>Affected:</strong> Maven: org.apache.activemq:activemq-parent, Maven: org.apache.activemq:apache-artemis</p> <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> https://cve.radiocsirt.org/vuln/ghsa-9mgm-gcq8-86wq gsd-2021-26117 https://cve.radiocsirt.org/vuln/gsd-2021-26117 gsd-2021-26117 https://cve.radiocsirt.org/vuln/gsd-2021-26117 RHSA-2020:4154 — Red Hat Security Advisory: Red Hat AMQ Broker 7.4.5 release and security update https://cve.radiocsirt.org/vuln/rhsa-2020:4154 <p>Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ hawtio: server side request forgery via initial /proxy/ substring of a URI activemq: LDAP authentication bypass with anonymous bind</p> <p>Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ hawtio: server side request forgery via initial /proxy/ substring of a URI activemq: LDAP authentication bypass with anonymous bind</p> https://cve.radiocsirt.org/vuln/rhsa-2020:4154 UBUNTU-CVE-2021-26117 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26117 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq</p> <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: activemq, Ubuntu:Pro:18.04:LTS: activemq, Ubuntu:Pro:20.04:LTS: activemq</p> <p>The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-26117 WID-SEC-W-2023-1807 — Oracle Fusion Middleware: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1807 <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1807