CVE-2012-3467

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote…

published August 27, 2012

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06394 · 93.6th percentile
Published
2012-08-27T23:00Z
EPSS history
Timeline
  • 27 AUG 23:00Z
    Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote…
    cvelistv5