CVE-2010-1244

Summary

Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.

Impact & exploitability

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: http://activemq.apache.org/activemq-531-release.html ↗

Additional information

• NVD record
• http://activemq.apache.org/activemq-531-release.htmlPatch
• http://secunia.com/advisories/39223Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57398
• https://issues.apache.org/activemq/browse/AMQ-2613Exploit
• https://issues.apache.org/activemq/browse/AMQ-2625Exploit