VDB
CVE-2012-6551
CVE-2012-6551
PUBLISHED
CVSS 5 MEDIUM
Apache ActiveMQ default configuration subject to denial of service
EPSS 8.36% · 92.5th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
8.36%
92.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Maven | org.apache.activemq:apache-activemq | 0 |
| apache | activemq | 4.0, 4.0, 4.0.2 |
| n/a | n/a | n/a |
| Maven | org.apache.activemq:activemq-web-demo | 0 |
Exploit Intelligence
- 59401 (circl)
- RHSA-2013:1029 (circl)
- [dev] 20121022 [DISCUSS] - ActiveMQ out of the box - Should not include the demos (circl)
- https://fisheye6.atlassian.com/changelog/activemq?cs=1404998 (circl)
- http://activemq.apache.org/activemq-580-release.html (circl)
- https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282 (circl)
- https://issues.apache.org/jira/browse/AMQ-4124 (circl)
Timeline
- Apr 21, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Sep 7, 2023 EPSS Score
- Oct 29, 2023 EPSS Score
References
- 59401 vdb
- RHSA-2013:1029 vendor-advisory
- [dev] 20121022 [DISCUSS] - ActiveMQ out of the box - Should not include the demos mailing-list
- https://fisheye6.atlassian.com/changelog/activemq?cs=1404998 url
- http://activemq.apache.org/activemq-580-release.html url
- https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282 url
- https://issues.apache.org/jira/browse/AMQ-4124 url
- https://nvd.nist.gov/vuln/detail/CVE-2012-6551 advisory
- https://github.com/apache/activemq/commit/22bc55b9487df98a3c3cb04f99f4618fcba364fe url
- https://github.com/apache/activemq/commit/437ea2f6e58d18837ae0e68dcd2fdadc1fff3723 url
- https://github.com/apache/activemq/commit/ced33d2551a040813cb40bd6d36fdd322034fa73 url
- https://github.com/apache/activemq package
- https://issues.apache.org/jira/browse/AMQ-5033 url
- https://web.archive.org/web/20130916074709/http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html url
- https://web.archive.org/web/20200228042520/http://www.securityfocus.com/bid/59401 url