Apache: >> Qpid Broker-J >> 6.0.1 Security Vulnerabilities
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.
CVSS Score
5.9
EPSS Score
0.078
Published
2016-06-01
Page 2