RHSA-2020:4154MediumCVSS 8.1

Red Hat Security Advisory: Red Hat AMQ Broker 7.4.5 release and security update

Published
October 1, 2020
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2015-5183 →CVE-2019-9827 →CVE-2021-26117 →

📋 Description

CVE-2015-5183 — Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ CVE-2019-9827 — hawtio: server side request forgery via initial /proxy/ substring of a URI CVE-2021-26117 — activemq: LDAP authentication bypass with anonymous bind

🎯 Affected products1

  • Red Hat AMQ

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update). Workaround: There is currently no known mitigation for this issue.

🔗 References (7)