CVE-2013-3060: Medium severity Apache ActiveMQ vulnerability
Apache ActiveMQ is vulnerable to a denial of service, caused by the failure to require authentication, by the Web console. By sending specially-crafted HTTP requests, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service.
Other sources
The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2013-3060?
CVE-2013-3060 is a vulnerability in Apache ActiveMQ that allows remote attackers to obtain sensitive information or cause a denial of service.
How does CVE-2013-3060 impact Apache ActiveMQ?
CVE-2013-3060 impacts Apache ActiveMQ by allowing unauthorized access to the Web console, leading to potential data breaches or service disruptions.
What is the severity level of CVE-2013-3060?
The severity level of CVE-2013-3060 is medium, with a severity value of 6.4.
How can I fix CVE-2013-3060 in Apache ActiveMQ?
To fix CVE-2013-3060 in Apache ActiveMQ, you should update to version 5.8.0 or later, which requires authentication for the Web console.
Where can I find more information about CVE-2013-3060?
You can find more information about CVE-2013-3060 in the references provided: [1](http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html), [2](http://activemq.apache.org/activemq-580-release.html), [3](http://rhn.redhat.com/errata/RHSA-2013-1029.html)