CVE-2015-5182: CSRF
Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ.
Other sources
It was found that A-MQ's jolokia API does not have token or referrer checks, and could possibly allow a cross-site request forgery (CSRF) attack. An attacker could use this vulnerability to run application code with the same permissions as an authenticated user.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5182?
CVE-2015-5182 is classified as a medium-severity vulnerability due to its potential for exploitation through cross-site request forgery.
How do I fix CVE-2015-5182?
To fix CVE-2015-5182, implement token or referer checks in the A-MQ jolokia API to prevent CSRF attacks.
Who is affected by CVE-2015-5182?
CVE-2015-5182 affects users of the Red Hat AMQ who utilize the jolokia API.
What type of attack is enabled by CVE-2015-5182?
CVE-2015-5182 enables cross-site request forgery (CSRF) attacks that can execute unauthorized commands.
Is CVE-2015-5182 easy to exploit?
Yes, CVE-2015-5182 can be relatively easy to exploit due to the lack of security checks in the jolokia API.