Red Hat Security AdvisoryRHSA-2012:0529
Red Hat Enterprise MRG Messaging 2.1 security and enhancement update
Released 2012-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- MRG Grid Execute Node for RHEL 5 Server v.2 condor-7.6.5-0.14.el5, condor-7.6.5-0.14.el5.i386, condor-classads-7.6.5-0.14.el5 +7
- MRG Grid for RHEL 5 Server v.2 condor-7.6.5-0.14.el5, condor-7.6.5-0.14.el5.i386, condor-aviary-7.6.5-0.14.el5 +11
- MRG Management for RHEL 5 Server v.2 sesame-1.0-3.el5, sesame-1.0-3.el5.i386
- Red Hat MRG Messaging for RHEL 5 Server v.2 python-qpid-0.14-6.el5, python-qpid-qmf-0.14-9.el5, python-qpid-qmf-0.14-9.el5.i386 +41
Fixes 1 record
Priority MEDIUM 41
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowle…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0525 · Published 2012-05-03 · Partial fix CWE-287
