Red Hat Security AdvisoryRHSA-2013:1024
Red Hat Enterprise MRG Messaging 2.3.3 security update
Released 2013-07-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 python-qpid-0.18-5.el6_4, python-qpid-qmf-0.18-18.el6_4, qpid-cpp-0.18-17.el6_4 +7
- Red Hat MRG Messaging for RHEL 6 Server v.2 python-qpid-0.18-5.el6_4, python-qpid-qmf-0.18-18.el6_4, qpid-cpp-0.18-17.el6_4 +20
Fixes 1 record
Priority LOW 30
The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middl…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01824 · Published 2013-08-23 · Partial fix · 0.22 CWE-20
