CVE-2016-4432

Critical

Published: 01/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

AMQP connection handling in Apache Qpid Java before version 6.0.3 may allow remote attackers to bypass authentication, enabling actions related to connection state logging.

Risk Assessment

Attackers may gain unauthorized access to the system, posing a significant threat to data security and system integrity.

Recommendation

It is recommended to upgrade Apache Qpid Java to version 6.0.3 or later to mitigate this vulnerability.

Original NVD description (English source)

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging.