{"id":"CVE-2012-6551","published":"2013-04-21T21:00:00Z","modified":"2024-08-06T21:36:00Z","title":"The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote…","vendor":null,"product":null,"tier":"tail","description":{"text":"The default configuration of Apache ActiveMQ before 5.8.0 enables a sample web application, which allows remote attackers to cause a denial of service (broker resource consumption) via HTTP requests.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.07769,"percentile":0.94603,"provenance":"source"},"cwes":[],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-1029.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://fisheye6.atlassian.com/changelog/activemq?cs=1404998","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/59401","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://activemq.apache.org/activemq-580-release.html","tags":["x_refsource_CONFIRM"]},{"url":"https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282","tags":["x_refsource_CONFIRM"]},{"url":"https://issues.apache.org/jira/browse/AMQ-4124","tags":["x_refsource_CONFIRM"]}],"priority":{"score":18.9,"factors":[{"name":"EPSS percentile","points":18.92}]},"affected":[{"ecosystem":"Maven","package":"org.apache.activemq:apache-activemq","vulnerableRanges":["<5.8.0"],"patched":["5.8.0"],"from":["GHSA-34fp-xvxp-rg22"],"provenance":"source"},{"ecosystem":"Maven","package":"org.apache.activemq:activemq-web-demo","vulnerableRanges":["<5.8.0"],"patched":["5.8.0"],"from":["GHSA-34fp-xvxp-rg22"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2104","exploited":false,"provenance":"source"}}