CVE-2012-3467

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

Date published : 2012-08-27

http://www.securityfocus.com/bid/54954

http://svn.apache.org/viewvc?view=revision&revision=1352992