Hi JB
Thank you so much. Very appreciated.
Best regards
Martin
-Ursprüngliche Nachricht-
Von: Jean-Baptiste Onofré
Gesendet: Donnerstag, 11. April 2024 07:25
An: users@activemq.apache.org
Betreff: Re: Disabled authentication ActiveMQ Classic Webapps since V6.x
H Martin
For the
H Martin
For the tracking, here's the Jira ticket:
https://issues.apache.org/jira/browse/AMQ-9477
The fix has been merged. We will move forward with the 6.1.2 release
including this.
Thanks for the report.
Regards
JB
On Wed, Apr 10, 2024 at 11:32 AM Zeissig, Martin
wrote:
>
> Dear Community
>
users@activemq.apache.org
> Subject: Disabled authentication ActiveMQ Classic Webapps since V6.x
>
> Dear Community
>
> I have updated from ActiveMQ Classic 5.x to 6.1.1.
> Since update to 6.1.1 the API (webapps jolokia) is unprotected and can be
> accessed without basic authenti
have a security issue now.
>
> I wanted to report the issue as friendly hint only.
>
> Best regards
>
> Martin
>
>
> -Ursprüngliche Nachricht-
> Von: Vilius Šumskas
> Gesendet: Mittwoch, 10. April 2024 13:47
> An: users@activemq.apache.org
> Betreff:
abled authentication ActiveMQ Classic Webapps since V6.x
You should probably create a bug ticket first :)
--
Vilius
-Original Message-
From: Zeissig, Martin
Sent: Wednesday, April 10, 2024 2:46 PM
To: users@activemq.apache.org
Subject: AW: Disabled authentication ActiveMQ Classic We
You should probably create a bug ticket first :)
--
Vilius
-Original Message-
From: Zeissig, Martin
Sent: Wednesday, April 10, 2024 2:46 PM
To: users@activemq.apache.org
Subject: AW: Disabled authentication ActiveMQ Classic Webapps since V6.x
Hi Vilius
Thanks for confirmation
should protect everything.
--
Vilius
-Original Message-
From: Zeissig, Martin
Sent: Wednesday, April 10, 2024 12:33 PM
To: users@activemq.apache.org
Subject: Disabled authentication ActiveMQ Classic Webapps since V6.x
Dear Community
I have updated from ActiveMQ Classic 5.x to 6.1.1
should protect everything.
--
Vilius
-Original Message-
From: Zeissig, Martin
Sent: Wednesday, April 10, 2024 12:33 PM
To: users@activemq.apache.org
Subject: Disabled authentication ActiveMQ Classic Webapps since V6.x
Dear Community
I have updated from ActiveMQ Classic 5.x to 6.1.1
Dear Community
I have updated from ActiveMQ Classic 5.x to 6.1.1.
Since update to 6.1.1 the API (webapps jolokia) is unprotected and can be
accessed without basic authentication:
Example:
http://localhost:8161/api
In previous ActiveMQ Classic versions (5.x) the API was protected with
authentic
