RHSA-2022:5101HighCVSS 9.1

Red Hat Security Advisory: Red Hat AMQ Broker 7.10.0 release and security update

Published
June 16, 2022
Last Modified
June 15, 2026

🔗 CVE IDs covered (7)

📋 Description

CVE-2019-10744 — nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties CVE-2020-36518 — jackson-databind: denial of service via a large depth of nested objects CVE-2021-4040 — Broker: Malformed message can result in partial DoS (OOM) CVE-2021-43797 — netty: control chars in header names may lead to HTTP request smuggling CVE-2022-1833 — amq: AMQ Broker Operator ClusterWide Edit Permissions Due Token Exposure CVE-2022-22968 — Framework: Data Binding Rules Vulnerability CVE-2022-23913 — artemis-commons: Apache ActiveMQ Artemis DoS

🔗 References (12)