Vulnerabilities > Redhat > AMQ Broker

DATE CVE VULNERABILITY TITLE RISK
2022-08-24 CVE-2021-4040 Out-of-bounds Write vulnerability in multiple products
A flaw was found in AMQ Broker.
network
low complexity
redhat apache CWE-787
5.3
2022-08-23 CVE-2021-3763 Incorrect Authorization vulnerability in Redhat AMQ Broker 7.8.0/7.8.1/7.8.2
A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited information even when the role the user is assigned to should not be allow access to the management console.
network
low complexity
redhat CWE-863
4.3
2022-06-21 CVE-2022-1833 Incorrect Default Permissions vulnerability in Redhat AMQ Broker 7.9.4
A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where the AMQ Operator is deployed has access to clusterwide edit rights by checking the secrets.
network
low complexity
redhat CWE-276
8.8