Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-34fp-xvxp-rg22
Advisory ID github_osv/GHSA-34fp-xvxp-rg22
Aliases CVE-2012-6551
Summary Apache ActiveMQ default configuration subject to denial of service The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-400 Uncontrolled Resource Consumption
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://activemq.apache.org/activemq-580-release.html
https://github.com/apache/activemq
https://github.com/apache/activemq/commit/22bc55b9487df98a3c3cb04f99f4618fcba364fe
https://github.com/apache/activemq/commit/437ea2f6e58d18837ae0e68dcd2fdadc1fff3723
https://github.com/apache/activemq/commit/ced33d2551a040813cb40bd6d36fdd322034fa73
https://issues.apache.org/jira/browse/AMQ-4124
https://issues.apache.org/jira/browse/AMQ-5033
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282
https://web.archive.org/web/20130916074709/http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html
https://web.archive.org/web/20200228042520/http://www.securityfocus.com/bid/59401
CVE-2012-6551 https://nvd.nist.gov/vuln/detail/CVE-2012-6551
RHSA-2013-1029.html http://rhn.redhat.com/errata/RHSA-2013-1029.html
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.