description: TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
problem types: Missing TLS Hostname Verification
affected:
{
product: Apache ActiveMQ
vendor: Apache Software Foundation
versions:
status: affected, version: 5.0.0 - 5.15.5
}