Between Version 6.2.5 and 6.2.6/6.2.7 there are some undocumented changes in the default access settings on the webconsole.

Reproduce:

docker run --rm -p 61616:61616 -p 8161:8161 apache/activemq:6.2.5

Browse http://localhost:8161/ and Login with "admin/***"
-> everythings works fine

docker run --rm -p 61616:61616 -p 8161:8161 apache/activemq:6.2.7

Browse http://localhost:8161/ and getting 403 Forbidden
-> not as expected