{"id":"CVE-2011-3620","aliases":["EUVD-2011-3579","GHSA-3j5v-8288-v25g","RHSA-2012:0528","RHSA-2012:0529"],"status":"published","title":"Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which...","description":"Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0525,"percentile":0.92591,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2012-05-03T23:00:00Z","modified":"2026-06-28T10:06:07Z","fixes":[{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-classads","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-debuginfo","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-kbdd","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-qmf","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-vm-gahp","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame","fixed_in":["0:1.0-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame-debuginfo","fixed_in":["0:1.0-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-aviary","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-classads","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-debuginfo","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-kbdd","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-plumage","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-qmf","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-vm-gahp","fixed_in":["0:7.6.5-0.14.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame","fixed_in":["0:1.0-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame-debuginfo","fixed_in":["0:1.0-5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel-docs","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-rdma","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-debuginfo","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-cluster","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-devel","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-rdma","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-store","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-xml","fixed_in":["0:0.14-14.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java","fixed_in":["0:0.14-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-client","fixed_in":["0:0.14-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-common","fixed_in":["0:0.14-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-example","fixed_in":["0:0.14-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca","fixed_in":["0:0.14-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca-xarecovery","fixed_in":["0:0.14-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf","fixed_in":["0:0.14-7.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-debuginfo","fixed_in":["0:0.14-7.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-devel","fixed_in":["0:0.14-7.el6_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor","fixed_in":["0:7.6.5-0.14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-aviary","fixed_in":["0:7.6.5-0.14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-classads","fixed_in":["0:7.6.5-0.14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-debuginfo","fixed_in":["0:7.6.5-0.14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-kbdd","fixed_in":["0:7.6.5-0.14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-qmf","fixed_in":["0:7.6.5-0.14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-vm-gahp","fixed_in":["0:7.6.5-0.14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame","fixed_in":["0:1.0-3.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame-debuginfo","fixed_in":["0:1.0-3.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid","fixed_in":["0:0.14-6.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid-qmf","fixed_in":["0:0.14-9.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel-docs","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-rdma","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-ssl","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg-debuginfo","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-cluster","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-devel","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-rdma","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-ssl","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-store","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-xml","fixed_in":["0:0.14-14.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java","fixed_in":["0:0.14-3.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-client","fixed_in":["0:0.14-3.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-common","fixed_in":["0:0.14-3.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-example","fixed_in":["0:0.14-3.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca","fixed_in":["0:0.14-9.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca-xarecovery","fixed_in":["0:0.14-9.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf","fixed_in":["0:0.14-9.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-debuginfo","fixed_in":["0:0.14-9.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-devel","fixed_in":["0:0.14-9.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tests","fixed_in":["0:0.14-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tools","fixed_in":["0:0.14-2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-qpid-qmf","fixed_in":["0:0.14-9.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-plumage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca-xarecovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-7.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-7.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-7.el6_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-3.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"sesame-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-3.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-6.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-14.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-3.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca-xarecovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-9.el5"}]}]}],"products":[{"vendor":"apache","product":"qpid"}],"references":[{"url":"http://secunia.com/advisories/49000","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://issues.apache.org/jira/browse/QPID-3652","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747078","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://reviews.apache.org/r/2988/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id?1026990","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3620","tags":["advisory"]},{"url":"https://reviews.apache.org/r/2988"},{"url":"https://github.com/advisories/GHSA-3j5v-8288-v25g"},{"url":"https://access.redhat.com/errata/RHSA-2012:0528","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html-single/Technical_Notes/index.html#RHSA-2012-0528","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0528.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3620","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3620","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0529","tags":["advisory"]},{"url":"http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html-single/Technical_Notes/index.html#RHSA-2012-0529","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=650969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=674379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=691654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=700632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=704596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=705418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=727182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=733241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=733383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=734729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=735208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761186","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0529.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-3620","description":"Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.","status":"published","published":"2012-05-03T23:00:00Z","modified":"2024-08-06T23:37:48.662Z","updated_at":"2026-11-02T14:35:36.968002Z"}],"euvd":[{"id":"EUVD-2011-3579","description":"Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.","status":"published","published":"2012-05-03T23:00:00Z","modified":"2024-08-06T23:37:48Z","updated_at":"2026-11-03T01:39:50.860626Z"}],"ghsa":[{"id":"GHSA-3j5v-8288-v25g","title":"Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which...","description":"Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.","status":"published","published":"2022-05-17T05:26:06Z","modified":"2025-04-11T03:57:25Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:01:10.591916Z"}],"nvd":[{"id":"CVE-2011-3620","description":"Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.","status":"published","published":"2012-05-03T23:55:01.027Z","modified":"2026-06-16T23:33:38.393Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:02:12.272092Z"}],"osv":[{"id":"RHSA-2012:0528","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.1 security and enhancement update","status":"published","published":"2024-09-13T07:09:03Z","modified":"2026-06-28T10:06:07Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0529","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.1 security and enhancement update","status":"published","published":"2024-09-13T07:09:07Z","modified":"2026-06-28T10:06:07Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}