{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/activemq-6.3.0---6.3.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:apache:activemq:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:activemq:5.19.0:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-108500"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["ActiveMQ (6.3.0 - 6.3.2)","ActiveMQ (5.19.0 - 5.19.11)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","activemq","ldap"],"_cs_type":"advisory","_cs_vendors":["Apache"],"content_html":"\u003cp\u003eApache ActiveMQ is vulnerable to an authorization bypass issue (CVE-2026-108500) within the LDAPAuthorizationMapPlugin. An authenticated attacker can exploit this by creating or addressing a message destination using a name containing specific LDAP Distinguished Name (DN) special characters, such as commas, plus signs, equals signs, or backslashes. This allows the attacker to circumvent established authorization policies, potentially accessing or creating destinations they are not permitted to manage.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated attacker to bypass authorization constraints within the broker, leading to unauthorized message destination creation or access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify and inventory all Apache ActiveMQ instances running affected versions (6.3.0 through 6.3.2, or 5.19.0 through 5.19.11).\u003c/li\u003e\n\u003cli\u003eUpgrade Apache ActiveMQ 6.3.x instances to version 6.3.3 or later.\u003c/li\u003e\n\u003cli\u003eUpgrade Apache ActiveMQ 5.19.x instances to version 5.19.12 or later.\u003c/li\u003e\n\u003cli\u003eReview ActiveMQ audit logs for unexpected creation or interaction with destinations containing LDAP special characters (e.g., symbols like '+' or ',').\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T22:15:25Z","date_published":"2026-11-03T22:15:25Z","id":"https://feed.craftedsignal.io/briefs/2026-11-apache-activemq-ldap-bypass/","summary":"An input validation vulnerability in the LDAPAuthorizationMapPlugin allows authenticated attackers to bypass authorization controls via crafted destination names containing LDAP DN special characters.","title":"Apache ActiveMQ: LDAPAuthorizationMap authorization bypass (CVE-2026-108500)","url":"https://feed.craftedsignal.io/briefs/2026-11-apache-activemq-ldap-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - ActiveMQ (6.3.0 - 6.3.2)","version":"https://jsonfeed.org/version/1.1"}