Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.2 update

Fixed packages 53

Vulnerabilities 1

• Medium —
  CVE-2012-3467

  Apache QPID Allows Remote Authentication Bypass

  Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

  org.apache.qpid:qpid-parent Maven
  Aug 27, 2012

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/sec-Red_Hat_Enterprise_Linux_6.html#RHSA-2012-1279
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=836276
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1279.json
• report
  https://access.redhat.com/security/cve/CVE-2012-3467
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-3467
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-3467