CVE-2011-3620 in Apache Qpid
Summary
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
Reservation
09/21/2011
Disclosure
05/03/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60708 | Apache Qpid improper authentication | 287 | Not defined | Not defined | CVE-2011-3620 |