https://bugzilla.redhat.com/show_bug.cgi?id=1629918
Bug ID: 1629918
Summary: CVE-2018-11087 springframework-amqp: Improper hostname
validation
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
puntogil(a)libero.it
Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to
2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname
validation. A malicious user that has the ability to intercept traffic would be
able to view data in transit.
References:
https://pivotal.io/security/cve-2018-11087
--
You are receiving this mail because:
You are on the CC list for the bug.