• State Suggested Answer
  • Replies replies
    2
  • Answers answer
    1
  • Subscribers subscribers
    7
  • Views views
    249
  • Users 0 members are here

ActiveMQ vulneravilities

wencheng

Hi All

   Customer response sentinel been detect 2 activeMQ (TCP61616) vulnerabilivies.

1. CVE 184189 : Apache ActiveMQ < 5.15.16 / 5.16.x < 5.16.7 / 5.17.x < 5.17.6 / 5.18.x < 5.18.3 RCE
2. CVE 186650: ActiveMQ RCE (CVE-2023-46604)

How could I check the activeMQ version on senitnel appliance ?

Thanks!!

Wencheng

Tags:

  • Suggested Answer

    0   

    sentinel:~ # ls -la /opt/novell/sentinel/lib/activemq-*
-rw------- 1 novell novell 1208714 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-broker-5.16.7.jar
-rw------- 1 novell novell 1440244 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-client-5.16.7.jar
-rw------- 1 novell novell   39292 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-jaas-5.16.7.jar
-rw------- 1 novell novell   52901 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-jms-pool-5.16.7.jar
-rw------- 1 novell novell  691866 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-kahadb-store-5.16.7.jar
-rw------- 1 novell novell  686378 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-openwire-legacy-5.16.7.jar
-rw------- 1 novell novell   20891 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-pool-5.16.7.jar
-rw------- 1 novell novell  147874 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-protobuf-1.1.jar
-rw------- 1 novell novell  171807 Nov  4 06:56 /opt/novell/sentinel/lib/activemq-spring-5.16.7.jar

  • 0 in reply to   

     

        Thanks!! I compare ....8.5.1.1 use 5.16.3....8.6.1.1 use 5.16.7....

    Wencheng

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.