| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.qpid:qpid-broker | < 6.0.3 | 6.0.3 |
| qpid broker-j | ≤ 6.0.2 |
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free