| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol | < 6.0.3 | 6.0.3 |
| org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol | < 6.0.3 | 6.0.3 |
| qpid broker-j | < 6.0.3 | 6.0.3 |
The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free