CVE-2011-3620

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging…

published May 3, 2012

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05250 · 92.5th percentile
Published
2012-05-03T23:00Z
EPSS history
Timeline
  • 03 MAY 23:00Z
    Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging…
    cvelistv5