CVE:CVE-2021-26117
CNNVD:CNNVD-202101-2471
Apache ActiveMQ是美国阿帕奇（Apache）基金会的一套开源的消息中间件，它支持Java消息服务、集群、Spring Framework等。
Apache ActiveMQ LDAP login module 存在授权问题漏洞，该漏洞源于匿名上下文用于验证错误的有效用户密码，导致不检查密码。以下产品及版本受到影响：Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14。
solution:Upgrade apache activemq to a higher version than 5.15.14,5.16.1,and avoid the version [5.15.0,5.15.14),[5.16.0,5.16.1); Upgrade apache activemq_artemis to a higher version than 2.16.0,and avoid the version (,2.16.0); Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle communications_element_manager to a higher version than 8.2.4.0,and avoid the version [8.2.0,8.2.4.0]; Upgrade oracle communications_session_report_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0