En resumen
- CVE-2016-3094 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a org.apache.qpid:qpid-broker, qpid broker-j (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 7.8%, mayor que el 94.7% de las vulnerabilidades.
- Solución: actualizar a 6.0.3 o posterior.
Description
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
NVD description
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
Más vulnerabilidades de org.apache.qpid:qpid-broker
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free