https://bugzilla.redhat.com/show_bug.cgi?id=1702439
--- Comment #17 from Doran Moppert <dmoppert(a)redhat.com> ---
Mitigation:
A cryptographic weakness was discovered in qpid-proton's use of TLS. If the
qpid-proton client was used without client certificates, it would accept an
anonymous cipher offered by the server. A man-in-the-middle attacker could use
this to silently intercept traffic that should have been encrypted.
--
You are receiving this mail because:
You are on the CC list for the bug.