Skip to content
OpenAdvisories

Package · Ubuntu

qpid-cpp

11 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.9

    Improper Input Validation in org.apache.qpid:qpid-broker

    PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught excep…

  • Medium —

    Improper Authentication in Apache Qpid

    The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact vi…