CVE-2018-17187
1 advisory.
Maven/org.apache.qpid:proton-j CVE-2018-17187: high 7.4
Improper Certificate Validation in proton-j
Action: Upgrade org.apache.qpid:proton-j to 0.30.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3 | 0.30.0 | - |
Fixed versions
| 0.30.0 |
Sources
- osv: GHSA-xvch-r4wf-h8w9
- https://nvd.nist.gov/vuln/detail/CVE-2018-17187
- https://github.com/apache/qpid-proton-j/commit/0cb8ca03cec42120dcfc434561592d89a89a805e
- https://github.com/advisories/GHSA-xvch-r4wf-h8w9
- https://issues.apache.org/jira/browse/PROTON-1962
- https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E
- https://qpid.apache.org/cves/CVE-2018-17187.html
- http://www.securityfocus.com/bid/105935
CVE-2018-17187 · published · modified · JSON