Em resumo
- CVE-2016-3094 é uma vulnerabilidade MÉDIO (CVSS 5.9) que afeta org.apache.qpid:qpid-broker, qpid broker-j (apache).
- Chance de exploração nos próximos 30 dias (EPSS): 7.8%, maior que 94.7% das vulnerabilidades.
- Correção: atualize para 6.0.3 ou posterior.
Description
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
NVD description
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
Mais vulnerabilidades de org.apache.qpid:qpid-broker
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free