WID-SEC-W-2023-3070
Vulnerability from csaf_certbund - Published: 2023-12-06 23:00 - Updated: 2025-10-16 22:00Summary
Red Hat JBoss A-MQ: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
JBoss A-MQ ist eine Messaging-Plattform.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss A-MQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.
Betroffene Betriebssysteme
- Linux
- UNIX
- Windows
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "JBoss A-MQ ist eine Messaging-Plattform.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss A-MQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-3070 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3070.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-3070 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3070"
},
{
"category": "external",
"summary": "RedHat Security Advisory vom 2023-12-06",
"url": "https://access.redhat.com/errata/RHSA-2023:7678"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7697 vom 2023-12-07",
"url": "https://access.redhat.com/errata/RHSA-2023:7697"
},
{
"category": "external",
"summary": "Atlassian Security Bulletin December 12 2023 vom 2023-12-12",
"url": "https://confluence.atlassian.com/security/security-bulletin-december-12-2023-1319249520.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0705 vom 2024-02-06",
"url": "https://access.redhat.com/errata/RHSA-2024:0705"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0903 vom 2024-02-20",
"url": "https://access.redhat.com/errata/RHSA-2024:0903"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2945 vom 2024-05-21",
"url": "https://access.redhat.com/errata/RHSA-2024:2945"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3354 vom 2024-05-24",
"url": "https://access.redhat.com/errata/RHSA-2024:3354"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:6536 vom 2024-09-10",
"url": "https://access.redhat.com/errata/RHSA-2024:6536"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7248128 vom 2025-10-16",
"url": "https://www.ibm.com/support/pages/node/7248128"
}
],
"source_lang": "en-US",
"title": "Red Hat JBoss A-MQ: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-10-16T22:00:00.000+00:00",
"generator": {
"date": "2025-10-17T08:13:25.924+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2023-3070",
"initial_release_date": "2023-12-06T23:00:00.000+00:00",
"revision_history": [
{
"date": "2023-12-06T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-12-07T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-12-12T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2024-02-06T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-02-20T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-21T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-23T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-09-10T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-10-16T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c9.2.7",
"product": {
"name": "Atlassian Bamboo \u003c9.2.7",
"product_id": "1529586"
}
},
{
"category": "product_version",
"name": "9.2.7",
"product": {
"name": "Atlassian Bamboo 9.2.7",
"product_id": "1529586-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:9.2.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.3.5",
"product": {
"name": "Atlassian Bamboo \u003c9.3.5",
"product_id": "T031324"
}
},
{
"category": "product_version",
"name": "9.3.5",
"product": {
"name": "Atlassian Bamboo 9.3.5",
"product_id": "T031324-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:9.3.5"
}
}
}
],
"category": "product_name",
"name": "Bamboo"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.21.18",
"product": {
"name": "Atlassian Bitbucket \u003c7.21.18",
"product_id": "T031325"
}
},
{
"category": "product_version",
"name": "7.21.18",
"product": {
"name": "Atlassian Bitbucket 7.21.18",
"product_id": "T031325-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:7.21.18"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.9.7",
"product": {
"name": "Atlassian Bitbucket \u003c8.9.7",
"product_id": "T031614"
}
},
{
"category": "product_version",
"name": "8.9.7",
"product": {
"name": "Atlassian Bitbucket 8.9.7",
"product_id": "T031614-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:8.9.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.11.6",
"product": {
"name": "Atlassian Bitbucket \u003c8.11.6",
"product_id": "T031615"
}
},
{
"category": "product_version",
"name": "8.11.6",
"product": {
"name": "Atlassian Bitbucket 8.11.6",
"product_id": "T031615-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:8.11.6"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.12.4",
"product": {
"name": "Atlassian Bitbucket \u003c8.12.4",
"product_id": "T031616"
}
},
{
"category": "product_version",
"name": "8.12.4",
"product": {
"name": "Atlassian Bitbucket 8.12.4",
"product_id": "T031616-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:8.12.4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.13.3",
"product": {
"name": "Atlassian Bitbucket \u003c8.13.3",
"product_id": "T031617"
}
},
{
"category": "product_version",
"name": "8.13.3",
"product": {
"name": "Atlassian Bitbucket 8.13.3",
"product_id": "T031617-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:8.13.3"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.14.2",
"product": {
"name": "Atlassian Bitbucket \u003c8.14.2",
"product_id": "T031618"
}
},
{
"category": "product_version",
"name": "8.14.2",
"product": {
"name": "Atlassian Bitbucket 8.14.2",
"product_id": "T031618-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:8.14.2"
}
}
}
],
"category": "product_name",
"name": "Bitbucket"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c8.3.4",
"product": {
"name": "Atlassian Confluence \u003c8.3.4",
"product_id": "T030846"
}
},
{
"category": "product_version",
"name": "8.3.4",
"product": {
"name": "Atlassian Confluence 8.3.4",
"product_id": "T030846-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:8.3.4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.19.17",
"product": {
"name": "Atlassian Confluence \u003c7.19.17",
"product_id": "T031609"
}
},
{
"category": "product_version",
"name": "7.19.17",
"product": {
"name": "Atlassian Confluence 7.19.17",
"product_id": "T031609-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:7.19.17"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.4.5",
"product": {
"name": "Atlassian Confluence \u003c8.4.5",
"product_id": "T031610"
}
},
{
"category": "product_version",
"name": "8.4.5",
"product": {
"name": "Atlassian Confluence 8.4.5",
"product_id": "T031610-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:8.4.5"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.5.4",
"product": {
"name": "Atlassian Confluence \u003c8.5.4",
"product_id": "T031611"
}
},
{
"category": "product_version",
"name": "8.5.4",
"product": {
"name": "Atlassian Confluence 8.5.4",
"product_id": "T031611-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:8.5.4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.6.2",
"product": {
"name": "Atlassian Confluence \u003c8.6.2",
"product_id": "T031612"
}
},
{
"category": "product_version",
"name": "8.6.2",
"product": {
"name": "Atlassian Confluence 8.6.2",
"product_id": "T031612-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:8.6.2"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.7.1",
"product": {
"name": "Atlassian Confluence \u003c8.7.1",
"product_id": "T031613"
}
},
{
"category": "product_version",
"name": "8.7.1",
"product": {
"name": "Atlassian Confluence 8.7.1",
"product_id": "T031613-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:8.7.1"
}
}
}
],
"category": "product_name",
"name": "Confluence"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c9.4.13",
"product": {
"name": "Atlassian Jira \u003c9.4.13",
"product_id": "T031606"
}
},
{
"category": "product_version",
"name": "9.4.13",
"product": {
"name": "Atlassian Jira 9.4.13",
"product_id": "T031606-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira_software:9.4.13"
}
}
},
{
"category": "product_version_range",
"name": "Service Management \u003c4.20.28",
"product": {
"name": "Atlassian Jira Service Management \u003c4.20.28",
"product_id": "T031607"
}
},
{
"category": "product_version",
"name": "Service Management 4.20.28",
"product": {
"name": "Atlassian Jira Service Management 4.20.28",
"product_id": "T031607-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira_software:service_management__4.20.28"
}
}
},
{
"category": "product_version_range",
"name": "Service Management \u003c5.4.12",
"product": {
"name": "Atlassian Jira Service Management \u003c5.4.12",
"product_id": "T031608"
}
},
{
"category": "product_version",
"name": "Service Management 5.4.12",
"product": {
"name": "Atlassian Jira Service Management 5.4.12",
"product_id": "T031608-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira_software:service_management__5.4.12"
}
}
}
],
"category": "product_name",
"name": "Jira Software"
}
],
"category": "vendor",
"name": "Atlassian"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM QRadar SIEM",
"product": {
"name": "IBM QRadar SIEM",
"product_id": "T021415",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_version",
"name": "AMQ Streams 2",
"product": {
"name": "Red Hat Enterprise Linux AMQ Streams 2",
"product_id": "T037463",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:amq_streams_2"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.6.0 Streams",
"product": {
"name": "Red Hat JBoss A-MQ \u003c2.6.0 Streams",
"product_id": "T031506"
}
},
{
"category": "product_version",
"name": "2.6.0 Streams",
"product": {
"name": "Red Hat JBoss A-MQ 2.6.0 Streams",
"product_id": "T031506-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_amq:2.6.0_streams"
}
}
},
{
"category": "product_version",
"name": "Clients 3",
"product": {
"name": "Red Hat JBoss A-MQ Clients 3",
"product_id": "T031509",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_amq:clients_3"
}
}
},
{
"category": "product_version_range",
"name": "Broker \u003c7.12.0",
"product": {
"name": "Red Hat JBoss A-MQ Broker \u003c7.12.0",
"product_id": "T034934"
}
},
{
"category": "product_version",
"name": "Broker 7.12.0",
"product": {
"name": "Red Hat JBoss A-MQ Broker 7.12.0",
"product_id": "T034934-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_amq:broker__7.12.0"
}
}
}
],
"category": "product_name",
"name": "JBoss A-MQ"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-46751",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2022-46751"
},
{
"cve": "CVE-2023-20873",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-20873"
},
{
"cve": "CVE-2023-2976",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-2976"
},
{
"cve": "CVE-2023-31582",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-31582"
},
{
"cve": "CVE-2023-33201",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-33201"
},
{
"cve": "CVE-2023-40167",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-40167"
},
{
"cve": "CVE-2023-41080",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-41080"
},
{
"cve": "CVE-2023-42445",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-42445"
},
{
"cve": "CVE-2023-44387",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-44387"
},
{
"cve": "CVE-2023-44981",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-44981"
},
{
"cve": "CVE-2023-5072",
"product_status": {
"known_affected": [
"T031324",
"T031610",
"T031612",
"67646",
"T031325",
"T031611",
"T031614",
"T034934",
"T031613",
"T037463",
"1529586",
"T021415",
"T030846",
"T031616",
"T031506",
"T031615",
"T031607",
"T031618",
"T031606",
"T031617",
"T031609",
"T031509",
"T031608"
]
},
"release_date": "2023-12-06T23:00:00.000+00:00",
"title": "CVE-2023-5072"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…