Vulnerability · Published Sep 16, 2020 · Assigned by redhat
CVE-2020-14348
Medium 4.3
In plain English
A medium-severity security flaw in AMQ. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS NVD)4.3Medium
Exploit odds (30 days)0.8%top 43.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating addresses, though this does not impact upon already existing messaging clients or brokers.
Affected products (as reported)
Weakness: CWE-248
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1861814 x_refsource_MISC