Apache ActiveMQ broker Security Bypass Vulnerability (CVE-2018-11775)
Release Date: 2019-06-10
Updated: 2019-06-11
Affected Systems:
FLEXCUBE Private Banking 2.2 1
Oracle FLEXCUBE Private Banking 2.0.0.0
Oracle FLEXCUBE Private Banking 12.1.0.0
Oracle FLEXCUBE Private Banking 12.0.3.0
Oracle FLEXCUBE Private Banking 12.0.1.0
Oracle Enterprise Repository 12.1.3.0.0
Apache ActiveMQ 5.9.1
Apache ActiveMQ 5.6
Apache ActiveMQ 5.5.1
Apache ActiveMQ 5.5
Apache ActiveMQ 5.4.3
Apache ActiveMQ 5.4.2
Apache ActiveMQ 5.4.1
Apache ActiveMQ 5.4.0
Apache ActiveMQ 5.3.2
Apache ActiveMQ 5.15.5
Apache ActiveMQ 5.15.3
Apache ActiveMQ 5.15
Apache ActiveMQ 5.14.5
Apache ActiveMQ 5.14.2
Apache ActiveMQ 5.14.1
Apache ActiveMQ 5.1.0
Systems affected:
Apache ActiveMQ 5.15.6
description:
Manufacturers patch:
the Apache
------
the Apache has released a security bulletin (CVE-2018-11775) and the corresponding patch:
CVE-2018-11775: ActiveMQ Client - TLS Hostname Verification Missing
Link: HTTP: // ActiveMQ .apache.org / security-advisories.data / CVE-2018-11775-
announcement.txt patch download:
the Oracle
------
the Oracle has released a security bulletin (CVE-2018-11775) and the corresponding patch:
CVE-2018-11775: Oracle Critical Patch Update Advisory - April 2019
Links: https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html