Remote Shutdown Vulnerability in Apache ActiveMQ Client

CVE-2015-7559

Summary

A remote shutdown vulnerability exists in the Apache ActiveMQ client versions prior to 5.14.5 due to improper handling of commands within the ActiveMQConnection class. An attacker with access to a compromised broker could exploit this flaw, allowing them to execute a remote shutdown command. This exploitation may lead to a denial of service for connected clients, disrupting normal operations and impacting services reliant on stable communication through ActiveMQ.

References