https://bugzilla.redhat.com/show_bug.cgi?id=1702439
--- Doc Text *updated* by Doran Moppert <dmoppert(a)redhat.com> ---
A cryptographic weakness was discovered in qpid-proton's use of TLS. If the
qpid-proton client was used without client certificates, it would accept an anonymous
cipher offered by the server. A man-in-the-middle attacker could use this to silently
intercept traffic that should have been encrypted.
--
You are receiving this mail because:
You are on the CC list for the bug.