Vulnerability GHSA-f5cf-f7px-xpmh
Medium Risk
MEDIUM RISK
CVSS Score: 6.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
8 years ago
October 16, 2018 at 07:50 PM UTC
Moderate severity vulnerability that affects org.apache.qpid:proton-j
0.4 - 0.12.0
0.4 - 0.12.0
Summary
Moderate severity vulnerability that affects org.apache.qpid:proton-j
Details
The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
3 months ago
Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow
0.4 - 0.34.1 GHSA-p2gc-fm5w-94jj
0.4 - 0.34.1 GHSA-p2gc-fm5w-94jj
High Risk
7 years ago
Improper Certificate Validation in proton-j
0.4 - 0.29.0 GHSA-xvch-r4wf-h8w9
0.4 - 0.29.0 GHSA-xvch-r4wf-h8w9
Impacted packages
Timeline
Published
8 years ago
October 16, 2018 at 07:50 PM UTC
Fixed (0.12.1)
Unknown
Unknown
Last Modified
2 years ago
November 08, 2023 at 03:58 AM UTC