RHSA-2020:3209: Moderate: AMQ Online 1.5.2 release and security update

Published Jul 29, 2020

Updated

The release of Red Hat AMQ Online 1.5.2 serves as a replacement for AMQ Online 1.5.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked in the References.Security Fix(es): AMQ Online: CSRF in graphQL requests (CVE-2020-14319) postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat AMQ Online

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade AMQ Online to a version that resolves this vulnerability.
Fixed in 1.5.2

Event History

Jul 29, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:3209?

The severity of RHSA-2020:3209 is classified as moderate.

How do I fix RHSA-2020:3209?

To fix RHSA-2020:3209, you must upgrade to Red Hat AMQ Online 1.5.2.

What vulnerabilities are addressed in RHSA-2020:3209?

RHSA-2020:3209 addresses a CSRF vulnerability in GraphQL requests, identified by CVE-2020-1431.

What is the impact of the vulnerability in RHSA-2020:3209?

The impact of the vulnerability could potentially allow unauthorized actions through forged requests.

Is there a workaround for RHSA-2020:3209?

There is no official workaround for RHSA-2020:3209; the recommended action is to apply the security update.