CRITICAL🇵🇱 Wersja polska

CVE-2016-4432

CVSS 9.1v3.1pub. 2016-06-01upd. 2026-05-06

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Apache Qpid Broker J

    APP
    Apache
    < 6.0.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2017-15702CRITICAL9.8PL ✓same product

Apache Qpid Broker-J — pominięcie uwierzytelniania przez podmianę dostawcy auth

CVE-2026-68060HIGH7.5PL ✓same product

Apache Qpid Broker-J – DoS przez nadmierne alokacje pamięci (pre-auth)

CVE-2026-68074HIGH7.5PL ✓same product

Apache Qpid Broker-J: wyczerpanie zasobów bez uwierzytelnienia (DoS)

CVE-2026-68073HIGH7.5PL ✓same product

Apache Qpid Broker-J — DoS przez przepełnienie stosu bez uwierzytelnienia

CVE-2019-0200HIGH7.5same product

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0...