Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Qpid Java
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-3094 1 Apache 1 Qpid Java 2018-10-09 4.3 MEDIUM 5.9 MEDIUM
PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught exception.