{"id":"CVE-2012-4446","aliases":["EUVD-2022-4620","GHSA-mrgh-6x42-x6xf","RHSA-2013:0561","RHSA-2013:0562","UBUNTU-CVE-2012-4446"],"status":"published","title":"Improper Authentication in Apache Qpid","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04913,"percentile":0.92168,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2013-03-12T15:00:00Z","modified":"2026-06-28T10:07:38Z","fixes":[{"ecosystem":"Maven","package":"org.apache.qpid:qpid-client","fixed_in":["0.20"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.qpid:qpid-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.qpid:qpid-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20"}]}],"versions":["0.10","0.12","0.14","0.16","0.18"]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"mrg-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"cumin-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-2.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-4.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-client-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-mrg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-cpp-server-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-java-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-jca-xarecovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-qmf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"rhm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"saslwrapper-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"mrg-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-4.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-client-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-cpp-server-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"saslwrapper-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xerces-c-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"xqilla-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"mrg-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.7-2.1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.16-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"cumin-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-4.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-client-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-cpp-server-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-14.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-java-example","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-7.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-jca-xarecovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-qmf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"qpid-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"rhm-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-2.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-qpid-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-15.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"saslwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"saslwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"saslwrapper-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18-1.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xerces-c-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-20.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"xqilla-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-8.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qpid-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16-9build1","0.16-9ubuntu1","0.16-9ubuntu2"]}],"products":[{"vendor":"apache","product":"qpid"}],"references":[{"url":"https://issues.apache.org/jira/browse/QPID-4631","tags":["x_refsource_CONFIRM","x_transferred","web","article"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0561.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0562.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=851355","tags":["x_refsource_MISC","x_transferred","web","report"]},{"url":"http://secunia.com/advisories/52516","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4446","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mrgh-6x42-x6xf"},{"url":"https://access.redhat.com/errata/RHSA-2013:0561","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2013-0561.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=737685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=754990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=781496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=784957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=786555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=813742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=814356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=834256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=836141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=860011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868881","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=882243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895535","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0561.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4446","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4458","tags":["advisory"]},{"url":"https://issues.apache.org/jira/browse/QPID-4629","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4459","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0562","tags":["advisory"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2013-0562.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0562.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2012-4446","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-0561.html","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-4446","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","status":"published","published":"2013-03-12T15:00:00Z","modified":"2024-09-16T18:34:59.045Z","updated_at":"2026-11-02T14:34:51.269982Z"}],"euvd":[{"id":"EUVD-2022-4620","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","status":"published","published":"2013-03-12T15:00:00Z","modified":"2024-09-16T18:34:59Z","updated_at":"2026-11-03T00:55:31.048035Z"}],"ghsa":[{"id":"GHSA-mrgh-6x42-x6xf","title":"Improper Authentication in Apache Qpid","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","status":"published","published":"2022-05-17T05:13:24Z","modified":"2023-01-27T05:02:23Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:36:18.427692Z"}],"nvd":[{"id":"CVE-2012-4446","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","status":"published","published":"2013-03-14T03:10:22.53Z","modified":"2026-06-16T23:45:06.907Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"GHSA-mrgh-6x42-x6xf","title":"Improper Authentication in Apache Qpid","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","status":"published","published":"2022-05-17T05:13:24Z","modified":"2024-12-07T05:42:55.697932Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:46:52.170928Z"},{"id":"RHSA-2013:0561","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update","status":"published","published":"2024-09-22T16:06:30Z","modified":"2026-06-28T10:07:38Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:0562","title":"Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update","status":"published","published":"2024-09-22T16:06:36Z","modified":"2026-06-28T10:07:38Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2012-4446","description":"The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.","status":"published","published":"2013-03-14T03:10:00Z","modified":"2026-04-22T09:18:02.778361Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}