CVE-2016-0782

Related Files

Red Hat Security Advisory 2016-1424-01

Posted Jul 13, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-1424-01 - Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications. This patch is an update to Red Hat JBoss Fuse 6.2.1 and Red Hat JBoss A-MQ 6.2.1. It includes several bug fixes, which are documented in the readme.txt file included with the patch files. It was reported that the web based administration console does not set the X-Frame-Options header in HTTP responses. This allows the console to be embedded in a frame or iframe which could then be used to cause a user to perform an unintended action in the console. It was found that Apache Active MQ administration web console did not validate input correctly when creating a queue. An authenticated attacker could exploit this flaw via cross-site scripting and use it to access sensitive information or further attacks.

tags | advisory, web, xss

systems | linux, redhat

advisories | CVE-2016-0734, CVE-2016-0782

SHA-256 | 1f8ef5e671baaab7e8547e070bffdc69105dac1529159adb5f0b5131fa269819

Download | Favorite | View

Apache ActiveMQ 5.13.0 Cross Site Scripting

Posted Mar 13, 2016

Authored by Christopher Shannon

Apache ActiveMQ versions 5.13.0 and below suffer from a cross site scripting vulnerability.

tags | advisory, xss

advisories | CVE-2016-0782

SHA-256 | 34f3f24bff3127a31d9d602adf547e2d67725f9418e6b789e16f74c70ed95a6d

Download | Favorite | View