Description (CNA)
LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadata in the broker they should not have access to. This vulnerability is fixed in 2.6.6.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| cloudamqp / lavinmq | affected < 2.6.6 |
CWE
CWE-862
References
- https://github.com/cloudamqp/lavinmq/security/advisories/GHSA-r2mh-8vq6-qf7m
- https://github.com/cloudamqp/lavinmq/pull/1669
- https://github.com/cloudamqp/lavinmq/commit/e871f8d0a53685f04e39e6410a2421c1f82803b0
ADP enrichment
No English description supplied.
No references supplied.