MEDIUM 4.9 Maven
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ
GHSA-jvpp-hxjj-5ccc · CVE-2015-7559
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes