[AMQ-7465] Xerver Double Slash Authentication Bypass detected on ActiveMQ directory

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 5.14.5
• Fix Version/s: 5.16.0, 5.15.13
• Component/s: Security/JAAS
• Assignee: Jean-Baptiste Onofré
• Reporter: Bhavana
• Created: 13/Apr/20 07:53
• Updated: 23/May/20 05:08
• Resolved: 23/May/20 05:08

Description

Xerver Double Slash Authentication Bypass detected on ActiveMQ directory.

The version of Xerver installed on the remote host is affected by an authentication bypass vulnerability. It is possible to access protected web directories without authentication by prepending the directory with an extra '/'character, as long as the directory is not recursively protected.
A remote, unauthenticated attacker can leverage this issue to gain access to protected web directories.

Nessus was able to reproduce the issue using the following URL :
https://seliiuapp11022.seli.gic.ericsson.se:8162//admin/

We have assigned 8162 port for activemq GUI in our applications