[Bug 1257246] New: CVE-2015-6524 activemq: LDAPLoginModule implementation allows wildcard operators in usernames
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1257246
Bug ID: 1257246
Summary: CVE-2015-6524 activemq: LDAPLoginModule implementation
allows wildcard operators in usernames
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: agrimm(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com, s(a)shk.io,
tdawson(a)redhat.com, weli(a)redhat.com
Common Vulnerabilities and Exposures assigned an identifier CVE-2015-6524 to
the following vulnerability:
The LDAPLoginModule implementation the Java Authentication and Authorization
Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators
in usernames, which allows remote attackers to obtain credentials via a brute
force attack.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=kJ763Ve2az&a=cc_unsubscribe
_______________________________________________
java-sig-commits mailing list
java-sig-commits(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedorapro...
7 years, 7 months
Broken dependencies: jersey
by Fedora Koji Build System
jersey has broken dependencies in the F-25 tree:
On x86_64:
jersey-2.23.1-4.fc25.noarch requires mvn(javax.el:javax.el-api)
On i386:
jersey-2.23.1-4.fc25.noarch requires mvn(javax.el:javax.el-api)
On armhfp:
jersey-2.23.1-4.fc25.noarch requires mvn(javax.el:javax.el-api)
Please resolve this as soon as possible.
7 years, 7 months
Broken dependencies: weld-core
by Fedora Koji Build System
weld-core has broken dependencies in the F-25 tree:
On x86_64:
weld-core-2.3.5-1.fc25.noarch requires mvn(javax.el:el-api)
On i386:
weld-core-2.3.5-1.fc25.noarch requires mvn(javax.el:el-api)
On armhfp:
weld-core-2.3.5-1.fc25.noarch requires mvn(javax.el:el-api)
Please resolve this as soon as possible.
7 years, 7 months
Broken dependencies: glassfish-el
by Fedora Koji Build System
glassfish-el has broken dependencies in the F-25 tree:
On x86_64:
glassfish-el-3.0.0-6.fc24.noarch requires mvn(javax.el:javax.el-api)
On i386:
glassfish-el-3.0.0-6.fc24.noarch requires mvn(javax.el:javax.el-api)
On armhfp:
glassfish-el-3.0.0-6.fc24.noarch requires mvn(javax.el:javax.el-api)
Please resolve this as soon as possible.
7 years, 7 months
Broken dependencies: hive
by Fedora Koji Build System
hive has broken dependencies in the F-25 tree:
On x86_64:
hive-0.12.0-5.fc22.noarch requires glassfish-el-api
On i386:
hive-0.12.0-5.fc22.noarch requires glassfish-el-api
Please resolve this as soon as possible.
7 years, 7 months
Broken dependencies: mojarra
by Fedora Koji Build System
mojarra has broken dependencies in the F-25 tree:
On x86_64:
mojarra-2.2.13-1.fc25.noarch requires glassfish-el-api
On i386:
mojarra-2.2.13-1.fc25.noarch requires glassfish-el-api
On armhfp:
mojarra-2.2.13-1.fc25.noarch requires glassfish-el-api
Please resolve this as soon as possible.
7 years, 7 months
Broken dependencies: glassfish-jsp-api
by Fedora Koji Build System
glassfish-jsp-api has broken dependencies in the F-25 tree:
On x86_64:
glassfish-jsp-api-2.3.2-0.4.b01.fc24.noarch requires mvn(javax.el:javax.el-api)
On i386:
glassfish-jsp-api-2.3.2-0.4.b01.fc24.noarch requires mvn(javax.el:javax.el-api)
On armhfp:
glassfish-jsp-api-2.3.2-0.4.b01.fc24.noarch requires mvn(javax.el:javax.el-api)
Please resolve this as soon as possible.
7 years, 7 months
Broken dependencies: cdi-api
by Fedora Koji Build System
cdi-api has broken dependencies in the F-25 tree:
On x86_64:
cdi-api-1.2-3.fc25.noarch requires mvn(javax.el:javax.el-api)
On i386:
cdi-api-1.2-3.fc25.noarch requires mvn(javax.el:javax.el-api)
On armhfp:
cdi-api-1.2-3.fc25.noarch requires mvn(javax.el:javax.el-api)
Please resolve this as soon as possible.
7 years, 7 months