Vulnerability Intelligence Report
CVE-2020-14348
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating addresses, though this does not impact upon already existing messaging clients or brokers.
No Active Exploit Signals
CVSS Base Score
4.3
MEDIUM
EPSS Probability:0.81%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-248 ↗CWE-248
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| redhat | amq_online | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.808%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2020-06-17T00:00:00 |
| Published | 2020-09-16T17:43:39 |
| Last Updated | 2024-08-04T12:39:36 |
Community Chatter & Buzz