CVE-2013-3060
EUVD-2022-466321.04.2013, 21:55
The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | activemq | 𝑥 ≤ 5.7.0 |
| apache | activemq | 4.0 |
| apache | activemq | 4.0:m4 |
| apache | activemq | 4.0:rc2 |
| apache | activemq | 4.0.1 |
| apache | activemq | 4.0.2 |
| apache | activemq | 4.1.0 |
| apache | activemq | 4.1.1 |
| apache | activemq | 5.0.0 |
| apache | activemq | 5.1.0 |
| apache | activemq | 5.2.0 |
| apache | activemq | 5.3.0 |
| apache | activemq | 5.3.1 |
| apache | activemq | 5.3.2 |
| apache | activemq | 5.4.0 |
| apache | activemq | 5.4.1 |
| apache | activemq | 5.4.2 |
| apache | activemq | 5.5.0 |
| apache | activemq | 5.5.1 |
| apache | activemq | 5.6.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References