Apache ActiveMQ CVE-2012-6092 Multiple Cross Site Scripting Vulnerabilities
BID:59400
Info
Apache ActiveMQ CVE-2012-6092 Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 59400 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-6092 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 22 2013 12:00AM |
| Updated: | Feb 02 2016 08:10PM |
| Credit: | Gursev Kalra |
| Vulnerable: |
Redhat Fuse MQ Enterprise 7.1.0 IBM Sterling B2B Integrator 5.2 IBM Sterling B2B Integrator 5.1 Apache Apache ActiveMQ 5.7 Apache Apache ActiveMQ 5.5 Apache Apache ActiveMQ 5.3.1 Apache Apache ActiveMQ 5.3 Apache Apache ActiveMQ 5.2 Apache Apache ActiveMQ 5.4 |
| Not Vulnerable: |
Apache Apache ActiveMQ 5.8 |
Discussion
Apache ActiveMQ CVE-2012-6092 Multiple Cross Site Scripting Vulnerabilities
ActiveMQ is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
ActiveMQ versions prior to 5.8.0 are vulnerable.
ActiveMQ is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
ActiveMQ versions prior to 5.8.0 are vulnerable.
Solution / Fix
Apache ActiveMQ CVE-2012-6092 Multiple Cross Site Scripting Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.