An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE coul…
eclipse openmq Schwachstellen (CVE)
Für eclipse openmq veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
9.1Kritisch
Eclipse Foundation Eclipse OpenMQ; Eclipse Foundation Eclipse GlassFish
9.8Kritisch
Eclipse Foundation Eclipse OpenMQ
OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication. However, the product ships with a default administrative account (admin/ admin) and does not enforce a mandatory password change on first use. After the first …