NVD

Id
17116  
Name
CVE-2016-0734  
Description
The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-07  
Modified Date
2016-12-02  
Seq
2016-0734  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
94970 17116 CVE-2016-0734 http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt  View
94971 17116 CVE-2016-0734 [oss-security] 20160310 [ANNOUNCE] CVE-2016-0734: ActiveMQ Web Console - Clickjacking  View
94972 17116 CVE-2016-0734 1035327  View
94973 17116 CVE-2016-0734 RHSA-2016:1424  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1220 JVNDB-2016-001993 Apache ActiveMQ の Web ベースの管理コンソールにおけるクリックジャッキング攻撃を実行される脆弱性 Apache ActiveMQ の Web ベースの管理コンソールは、X-Frame-Options HTTP ヘッダを送信しないため、クリックジャッキング攻撃を実行される脆弱性が存在します。 CVE-2016-0734 86938 CVE-2016-0734 17116 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001993.html 2016-03-10 2016-04-12 View