Uploaded image for project: 'James Server'
  1. James Server
  2. JAMES-2567

current RabbmitMQ client (5.3.0) Vulnerability

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 3.2.0
    • Component/s: None
    • Labels:
      None

      Description

      CVE-2018-11087 More information(https://nvd.nist.gov/vuln/detail/CVE-2018-11087)

      moderate severity
      Vulnerable versions: >= 5.0.0, < 5.4.0
      Patched version: 5.4.0
      Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              trantienduchn Trần Tiến Đức
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: