CVEvulnerability
CVE-2012-3467
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-287
Description
Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.
Affected configurations
• apache qpid (<= 0.16)
• apache qpid 0.5
• apache qpid 0.6
• apache qpid 0.14
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://rhn.redhat.com/errata/RHSA-2012-1277.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1279.html rhn.redhat.com
- http://secunia.com/advisories/50186 Vendor Advisory
- http://secunia.com/advisories/50698 secunia.com
- http://svn.apache.org/viewvc?view=revision&revision=1352992 svn.apache.org
- http://www.openwall.com/lists/oss-security/2012/08/09/6 www.openwall.com
- http://www.securityfocus.com/bid/54954 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=836276 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77568 exchange.xforce.ibmcloud.com
- https://issues.apache.org/jira/browse/QPID-3849 issues.apache.org
- http://rhn.redhat.com/errata/RHSA-2012-1277.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1279.html rhn.redhat.com
- http://secunia.com/advisories/50186 Vendor Advisory
- http://secunia.com/advisories/50698 secunia.com
- http://svn.apache.org/viewvc?view=revision&revision=1352992 svn.apache.org
- http://www.openwall.com/lists/oss-security/2012/08/09/6 www.openwall.com
- http://www.securityfocus.com/bid/54954 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=836276 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77568 exchange.xforce.ibmcloud.com
- https://issues.apache.org/jira/browse/QPID-3849 issues.apache.org