A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Brokers configuration files, leading to denial of service and information disclosure.
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jboss_a-mq | Redhat | 7 (including) | 7 (including) |