Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Qpid Proton 安全漏洞
Vulnerability Description
Apache Qpid Proton是美国阿帕奇（Apache）软件基金会开发的一个高性能、轻量化的消息库。 Apache Qpid Proton 0.12.1之前版本的proton.reactor.Connector、proton.reactor.Container和proton.utils.BlockingConnection类中存在安全漏洞，该漏洞源于当SSL支持不可用时，amqps URI方案没有正确使用未加密的连接。攻击者可利用该漏洞获取敏感信息或修改数据。
CVSS Information
N/A
Vulnerability Type
N/A