The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol(Maven) | 0 | 6.0.3 | N/A |
| org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol(Maven) | 0 | 6.0.3 | N/A |
CVSS Metrics
