Threats tagged 'ghsa-5jrv-f37p-8c36'

A vulnerability in Apache ActiveMQ and Apache ActiveMQ Runtime Config allows improper invalidation of cached authorizations. Authenticated connections established before a principal's write grant removal can continue sending messages to the destination, bypassing new authorization restrictions. This affects versions from 6.0.0 before 6.3.3 and before 5.19.12. Upgrading to versions 6.4.0, 6.3.3, or 5.19.12 resolves the issue.