An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.
Advisories
Source ID Title
Github GHSA Github GHSA GHSA-r7mv-mv7m-pjw3 hornetq vulnerable to file overwrite, sensitive information disclosure
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 20 Dec 2024 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat jboss Enterprise Application Platform
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7.4
cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7
cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8
cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9
cpe:/a:redhat:jboss_enterprise_application_platform:8.0
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9
Vendors & Products Redhat jboss Enterprise Application Platform

Fri, 29 Nov 2024 02:15:00 +0000

Type Values Removed Values Added
Title hornetq-core-client: Arbitrarily overwrite files or access sensitive information
References
Metrics threat_severity

None

threat_severity

Important


Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-22

Wed, 06 Nov 2024 19:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat hornetq
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:redhat:hornetq:*:*:*:*:*:*:*:*
Vendors & Products Redhat
Redhat hornetq
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}


Mon, 04 Nov 2024 17:30:00 +0000

Type Values Removed Values Added
Description An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-11-06T16:11:29.503Z

Reserved: 2024-10-28T00:00:00

Link: CVE-2024-51127

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2024-11-04T18:15:05.113

Modified: 2024-11-21T09:45:17.017

Link: CVE-2024-51127

cve-icon Redhat

Severity : Important

Publid Date: 2024-11-04T00:00:00Z

Links: CVE-2024-51127 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses