CVE-2021-26118

CVE-2021-26118: Flaw in ActiveMQ Artemis OpenWire support

Vendor Apache Software Foundation

Product Apache ActiveMQ Artemis

Weakness CWE-284

Published January 27, 2021

Last update February 13, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error.

Key dates

02Disclosure timeline

January 27, 2021 CVE published

February 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-26118 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html