Threats tagged 'ghsa-xg6g-hg3m-3p78'

An input validation vulnerability exists in Apache ActiveMQ when configured with the LDAPAuthorizationMapPlugin. An authenticated attacker can craft destination names containing LDAP DN special characters to manipulate the LDAP search base used for access control list (ACL) lookups. This flaw affects Apache ActiveMQ versions from 6.3.0 before 6.3.3 and from 5.19.0 before 5.19.12. Upgrading to versions 6.4.0, 6.3.3, or 5.19.12 resolves the issue.