REDHAT-BUG-2477945: High severity Red Hat JBoss EAP vulnerability

submitted through leadership channels

Missing Authentication — Artemis CORE CREATEQUEUE(34) on ch1 creates durable queue pre-auth (JBoss EAP)

Missing authentication on the Artemis CORE protocol channel: an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker, enabling resource exhaustion and persistent broker-state manipulation without any credentials.

findings/jboss-eap17.md