[JAMES-2567] current RabbmitMQ client (5.3.0) Vulnerability - ASF JIRA

Voters

Watch issue

Watchers

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 3.2.0
Component/s: None
Labels:
None

Description

CVE-2018-11087 More information(https://nvd.nist.gov/vuln/detail/CVE-2018-11087)

moderate severity
Vulnerable versions: >= 5.0.0, < 5.4.0
Patched version: 5.4.0
Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

Attachments

Activity

Comment

This comment will be Viewable by All Users Viewable by All Users

Cancel

People

Assignee:: Unassigned

Reporter:: Trần Tiến Đức

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 19/Oct/18 02:49

Updated:: 19/Oct/18 09:27

Resolved:: 19/Oct/18 09:26

Agile

View on Board

current RabbmitMQ client (5.3.0) Vulnerability