From 047f4acb2f297dc9badea8d2ffb8ab4738fc4ab8 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 20:42:05 +0000 Subject: [PATCH] Publish GHSA-jvpp-hxjj-5ccc --- .../GHSA-jvpp-hxjj-5ccc/GHSA-jvpp-hxjj-5ccc.json | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2019/08/GHSA-jvpp-hxjj-5ccc/GHSA-jvpp-hxjj-5ccc.json b/advisories/github-reviewed/2019/08/GHSA-jvpp-hxjj-5ccc/GHSA-jvpp-hxjj-5ccc.json index bc02f35fdc6..89b9d05ee73 100644 --- a/advisories/github-reviewed/2019/08/GHSA-jvpp-hxjj-5ccc/GHSA-jvpp-hxjj-5ccc.json +++ b/advisories/github-reviewed/2019/08/GHSA-jvpp-hxjj-5ccc/GHSA-jvpp-hxjj-5ccc.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-jvpp-hxjj-5ccc", - "modified": "2021-08-17T20:27:34Z", + "modified": "2023-12-20T20:40:44Z", "published": "2019-08-01T19:17:45Z", "aliases": [ "CVE-2015-7559" ], "summary": "Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ", - "details": "It was found that the Apache ActiveMQ client before 5.15.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.", + "details": "It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.", "severity": [ { "type": "CVSS_V3", @@ -28,7 +28,7 @@ "introduced": "0" }, { - "fixed": "5.15.5" + "fixed": "5.14.5" } ] } @@ -40,10 +40,18 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7559" }, + { + "type": "WEB", + "url": "https://github.com/apache/activemq/commit/b8fc78ec6c367cbe2a40a674eaec64ac3d7d1ec" + }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7559" }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/activemq" + }, { "type": "WEB", "url": "https://issues.apache.org/jira/browse/AMQ-6470"