activemq -- Web Console Cross-Site Scripting

Vladimir Ivanov (Positive Technologies) reports:

Several instances of cross-site scripting vulnerabilities were
identified to be present in the web based administration console as well as the
ability to trigger a Java memory dump into an arbitrary folder. The root cause
of these issues are improper user data output validation and incorrect
permissions configured on Jolokia.