Uploaded image for project: 'James Server'
  1. James Server
  2. JAMES-2567

current RabbmitMQ client (5.3.0) Vulnerability

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 3.2.0
    • None
    • None

    Description

      CVE-2018-11087 More information(https://nvd.nist.gov/vuln/detail/CVE-2018-11087)

      moderate severity
      Vulnerable versions: >= 5.0.0, < 5.4.0
      Patched version: 5.4.0
      Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

      Attachments

        Activity

          People

            Unassigned Unassigned
            trantienduchn Trần Tiến Đức
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: