Red Hat Security AdvisoryRHSA-2012:0528
Red Hat Enterprise MRG Messaging 2.1 security and enhancement update
Released 2012-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 condor-7.6.5-0.14.el6, condor-classads-7.6.5-0.14.el6, condor-kbdd-7.6.5-0.14.el6 +2
- Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 condor-7.6.5-0.14.el6, condor-classads-7.6.5-0.14.el6, condor-kbdd-7.6.5-0.14.el6 +2
- Red Hat MRG Grid for RHEL 6 Server v.2 condor-7.6.5-0.14.el6, condor-aviary-7.6.5-0.14.el6, condor-classads-7.6.5-0.14.el6 +5
- Red Hat MRG Management for RHEL 6 ComputeNode v.2 sesame-1.0-5.el6
- Red Hat MRG Management for RHEL 6 Server v.2 sesame-1.0-5.el6
- Red Hat MRG Messaging for RHEL 6 Server v.2 qpid-cpp-0.14-14.el6_2, qpid-cpp-client-devel-0.14-14.el6_2, qpid-cpp-client-devel-docs-0.14-14.el6_2 +15
Fixes 1 record
Priority MEDIUM 41
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowle…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0525 · Published 2012-05-03 · Partial fix CWE-287
