Threats tagged 'ghsa-mhp6-f224-j2c3'

Apache ActiveMQ Broker versions before 5.19.8 and from 6.0.0 before 6.2.7 contain a missing authorization vulnerability. Temporary destinations, which should be isolated to the connection that created them, can be accessed by other connections due to insufficient server-side enforcement. This allows unauthorized consumption from temporary destinations belonging to other connections. The issue is fixed in versions 5.19.8 and 6.2.7.