Red Hat Security AdvisoryRHSA-2012:1279
Red Hat Enterprise MRG Messaging 2.2 update
Released 2012-09-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 mrg-release-2.2.0-1.el6, python-qpid-qmf-0.14-14.el6_3, qpid-cpp-0.14-22.el6_3 +12
- Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 mrg-release-2.2.0-1.el6
- Red Hat MRG Grid for RHEL 6 Server v.2 mrg-release-2.2.0-1.el6
- Red Hat MRG Management for RHEL 6 ComputeNode v.2 mrg-release-2.2.0-1.el6
- Red Hat MRG Management for RHEL 6 Server v.2 mrg-release-2.2.0-1.el6
- Red Hat MRG Messaging for RHEL 6 Server v.2 mrg-release-2.2.0-1.el6, python-qpid-qmf-0.14-14.el6_3, qpid-cpp-0.14-22.el6_3 +27
- Red Hat MRG Realtime for RHEL 6 Server v.2 mrg-release-2.2.0-1.el6
Fixes 1 record
Priority LOW 32
Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06394 · Published 2012-08-27 · Fixed in 0.17 CWE-287
