CVE-2011-3620
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which...
7.5 HighFix available
CVE-2011-3620 is a high vulnerability (CVSS 7.5) in Apache Qpid, published May 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.25%, the 92nd percentile. Fixed in condor 0:7.6.5-0.14.el6.
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
Exploit likelihood
5.25%Up 3.8 points since Feb 4, 2022
What each source reports
NVD Score used
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
- Record
CVE-2011-3620- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
- Record
CVE-2011-3620- Updated
- 2026-11-02
EUVDEUVD-2011-3579 No score
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
- Record
EUVD-2011-3579- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3j5v-8288-v25g No score
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which...
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
- Record
GHSA-3j5v-8288-v25g- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
condorRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-classadsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-debuginfoRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-kbddRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-qmfRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-vm-gahpRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
sesameRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.0-5.el6 | 0:1.0-5.el6 |
sesame-debuginfoRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:1.0-5.el6 | 0:1.0-5.el6 |
condorRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-aviaryRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
Show 64 moreShow less
| Package | Affected | Fixed |
|---|---|---|
condor-classadsRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-kbddRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-plumageRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-qmfRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
condor-vm-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.el6 | 0:7.6.5-0.14.el6 |
sesameRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.0-5.el6 | 0:1.0-5.el6 |
sesame-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:1.0-5.el6 | 0:1.0-5.el6 |
qpid-cppRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-client-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-client-devel-docsRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-client-rdmaRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-server-clusterRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-server-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-server-rdmaRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-server-storeRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-cpp-server-xmlRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-14.el6_2 | 0:0.14-14.el6_2 |
qpid-javaRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-3.el6 | 0:0.14-3.el6 |
qpid-java-clientRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-3.el6 | 0:0.14-3.el6 |
qpid-java-commonRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-3.el6 | 0:0.14-3.el6 |
qpid-java-exampleRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-3.el6 | 0:0.14-3.el6 |
qpid-jcaRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-9.el6 | 0:0.14-9.el6 |
qpid-jca-xarecoveryRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-9.el6 | 0:0.14-9.el6 |
qpid-qmfRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-7.el6_2 | 0:0.14-7.el6_2 |
qpid-qmf-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-7.el6_2 | 0:0.14-7.el6_2 |
qpid-qmf-develRed Hat:enterprise_mrg:2:server:el6 |
before 0:0.14-7.el6_2 | 0:0.14-7.el6_2 |
condorRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.el5 | 0:7.6.5-0.14.el5 |
condor-aviaryRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.el5 | 0:7.6.5-0.14.el5 |
condor-classadsRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.el5 | 0:7.6.5-0.14.el5 |
condor-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.el5 | 0:7.6.5-0.14.el5 |
condor-kbddRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.el5 | 0:7.6.5-0.14.el5 |
condor-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.el5 | 0:7.6.5-0.14.el5 |
condor-vm-gahpRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.el5 | 0:7.6.5-0.14.el5 |
sesameRed Hat:enterprise_mrg:2::el5 |
before 0:1.0-3.el5 | 0:1.0-3.el5 |
sesame-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:1.0-3.el5 | 0:1.0-3.el5 |
python-qpidRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-6.el5 | 0:0.14-6.el5 |
python-qpid-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-9.el5 | 0:0.14-9.el5 |
qpid-cpp-clientRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-client-develRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-client-devel-docsRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-client-rdmaRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-client-sslRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-mrgRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-mrg-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-serverRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-server-clusterRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-server-develRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-server-rdmaRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-server-sslRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-server-storeRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-cpp-server-xmlRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-14.el5 | 0:0.14-14.el5 |
qpid-javaRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-3.el5 | 0:0.14-3.el5 |
qpid-java-clientRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-3.el5 | 0:0.14-3.el5 |
qpid-java-commonRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-3.el5 | 0:0.14-3.el5 |
qpid-java-exampleRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-3.el5 | 0:0.14-3.el5 |
qpid-jcaRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-9.el5 | 0:0.14-9.el5 |
qpid-jca-xarecoveryRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-9.el5 | 0:0.14-9.el5 |
qpid-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-9.el5 | 0:0.14-9.el5 |
qpid-qmf-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-9.el5 | 0:0.14-9.el5 |
qpid-qmf-develRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-9.el5 | 0:0.14-9.el5 |
qpid-testsRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-1.el5 | 0:0.14-1.el5 |
qpid-toolsRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-2.el5 | 0:0.14-2.el5 |
ruby-qpid-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:0.14-9.el5 | 0:0.14-9.el5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/49000
issues.apache.org/jira/browse/QPID-3652
bugzilla.redhat.com/show_bug.cgi?id=747078
reviews.apache.org/r/2988
securitytracker.com/id?1026990
nvd.nist.gov/vuln/detail/CVE-2011-3620
Show 27 moreShow less
github.com/advisories/GHSA-3j5v-8288-v25g
access.redhat.com/errata/RHSA-2012:0528
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html-single/Technical_Notes/index.html
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0528.json
cve.org/CVERecord?id=CVE-2011-3620