https://bugzilla.redhat.com/show_bug.cgi?id=1702439
--- Doc Text *updated* by Summer Long <slong(a)redhat.com> ---
A man-in-the-middle flaw was discovered in Apache's qpid-proton functionality. If an
attacker were able to intercept TLS traffic from a server offering anonymous ciphers, they
could connect as a client to the server regardless of whether the client was configured to
verify the server's certificate.
--
You are receiving this mail because:
You are on the CC list for the bug.