CVE-2025-27427

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-27427
A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When combined with the send permission and automatic queue creation a user could successfully send a message with a routing-type not supported by the address when that message should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address. This issue affects Apache ActiveMQ Artemis from 2.0.0 through 2.39.0. Users are recommended to upgrade to version 2.40.0 which fixes the issue.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8 Mailing List Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/03/31/1 Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:activemq_artemis:*:*:*:*:*:*:*:*
History

14 Jul 2025, 12:08

Type Values Removed Values Added
First Time Apache activemq Artemis
Apache
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3
CPE cpe:2.3:a:apache:activemq_artemis:*:*:*:*:*:*:*:*
References () https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8 - () https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8 - Mailing List, Vendor Advisory
References () http://www.openwall.com/lists/oss-security/2025/03/31/1 - () http://www.openwall.com/lists/oss-security/2025/03/31/1 - Mailing List, Third Party Advisory

02 Apr 2025, 22:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/03/31/1 -
Summary
  • (es) Existe una vulnerabilidad en Apache ActiveMQ Artemis que permite a un usuario con el permiso createDurableQueue o createNonDurableQueue modificar el tipo de enrutamiento compatible con dicha dirección, incluso si no tiene el permiso createAddress. Al combinar esta vulnerabilidad con el permiso de envío y la creación automática de colas, un usuario podría enviar un mensaje con un tipo de enrutamiento no compatible con la dirección, cuando en realidad debería rechazarse porque el usuario no tiene permiso para cambiar el tipo de enrutamiento. Este problema afecta a Apache ActiveMQ Artemis desde la versión 2.0.0 hasta la 2.39.0. Se recomienda actualizar a la versión 2.40.0, que soluciona el problema.

01 Apr 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-01 08:15

Updated : 2025-07-14 12:08

NVD link : CVE-2025-27427

Mitre link : CVE-2025-27427

CVE.ORG link : CVE-2025-27427

JSON object : View

Products Affected

apache

  • activemq_artemis
CWE
CWE-863

Incorrect Authorization