Lucene search
Veracode Vulnerability DatabaseVERACODE:3190HistoryDec 30, 2016 - 1:09 a.m.
Information Leakage
2016-12-3001:09:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
47.2%
qpid-broker-core is vulnerable to information leakage. It is possible for a remote attacker to determine the existence of user accounts due to a prematurely termination SCRAM SASL negotiation. This vulnerability only applies for applications using the SCRAM-SHA-1 or SCAM-SHA-256 AuthenticationProvider.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache qpid broker-j core | eq | 6.1.0 | |
| apache qpid broker-j core | le | 6.0.5 |
Related
nvd
nvd
CVE-2016-8741
2017-05-15 14:29:00
nessus
nessus
Fedora 25 : qpid-java (2017-7b181f9c98)
2017-01-13 00:00:00
osv
osv
CVE-2016-8741
2017-05-15 14:29:00
fedora
fedora
[SECURITY] Fedora 25 Update: qpid-java-6.0.4-5.fc25
2017-01-12 05:26:36
cvelist
cvelist
CVE-2016-8741
2017-05-15 14:00:00
cve
cve
CVE-2016-8741
2017-05-15 14:29:00
zdt
zdt
Apache Qpid Broker For Java 6.1.0 Information Leak Vulnerability
2016-12-29 00:00:00
redhatcve
redhatcve
CVE-2016-8741
2017-01-03 15:18:02
prion
prion
Authentication flaw
2017-05-15 14:29:00
openvas
openvas
Fedora Update for qpid-java FEDORA-2017-7b181f9c98
2017-01-13 00:00:00
github
github