VIR Vulnerability Intelligence Relay

CVE-2016-8741

high
Published 2017-05-15 · Modified 2023-11-08
CVSS v3
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2
5.0
VIR risk
7.5

Description

Exposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java

Predictions

Exploit likelihood
83%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: security@apache.org — http://qpid.2158936.n2.nabble.com/CVE-2016-8741-Apache-Qpid-Broker-for-Java-Information-Leakage-td7657025.html

Package impact
EcosystemPackageVulnerableFixed
java Mavenorg.apache.qpid:qpid-broker>=6.0.0,<6.0.66.0.6
java Mavenorg.apache.qpid:qpid-broker>=6.1.0,<6.1.16.1.1

Application impact
VendorProductVersionsFixed
apache apacheqpid_broker-j6.0.1
apache apacheqpid_broker-j6.0.2
apache apacheqpid_broker-j6.0.3
apache apacheqpid_broker-j6.0.4
apache apacheqpid_broker-j6.0.5
apache apacheqpid_broker-j6.1.0

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.