CVE-2015-0223

CWE-2648 documents6 sources
Severity
5.0MEDIUM
EPSS
2.3%
top 15.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Qpid
Timeline
PublishedFeb 2
Latest updateMay 14

Description

Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/qpid0.30

🔴Vulnerability Details

3
GHSA
GHSA-qf3w-wxcx-5cx6: Unspecified vulnerability in Apache Qpid 0↗2022-05-14
▶
CVEList
CVE-2015-0223: Unspecified vulnerability in Apache Qpid 0↗2015-02-02
▶
OSV
CVE-2015-0223: Unspecified vulnerability in Apache Qpid 0↗2015-02-02
▶

📋Vendor Advisories

1
Red Hat
qpid-cpp: anonymous access to qpidd cannot be prevented↗2015-01-27
▶

💬Community

3
Bugzilla
CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented↗2015-01-27
▶
Bugzilla
CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented [fedora-all]↗2015-01-27
▶
Bugzilla
CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented [epel-7]↗2015-01-27
▶
CVE-2015-0223 (MEDIUM CVSS 5) | Unspecified vulnerability in Apache | cvebase.io