CVE-2012-3467 Apache QPID Allows Remote Authentication Bypass

What is CVE-2012-3467?

CVE-2012-3467 is a medium-severity authentication bypass vulnerability in n/a, published on 27 Aug 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

Weakness: CWE-287

Which versions are affected by CVE-2012-3467?

2 open source packages ship an affected version, including org.apache.qpid:qpid-parent. It affects 1 product.

Products include Apache Qpid.

How do I fix CVE-2012-3467?

Upgrade org.apache.qpid:qpid-parent to 0.17 or later.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2012-3467 being exploited?

There is no known exploitation of CVE-2012-3467 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-0224 Denial of service in n/a High 7.5
• CVE-2011-3620 Auth bypass in n/a High 7.5
• CVE-2019-0223 Security feature bypass in Apache Qpid Proton High 7.4
• CVE-2012-4446 Improper Authentication in Apache Qpid Medium 6.8
• CVE-2015-0203 Denial of service in n/a Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CVE-2012-3550, GHSA-phw8-fw9g-v3xc, RHSA-2012:1279.