Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-10727 3 Apache, Netapp, Redhat 3 Artemis, Oncommand Workflow Automation, Amq Broker 2026-06-15 5.5 Medium
A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.
CVE-2021-26118 3 Apache, Netapp, Redhat 3 Artemis, Oncommand Workflow Automation, Amq Broker 2026-06-15 7.5 High
While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error.