CVE catalog
CVE-2012-4446
UBUNTU-CVE-2012-4446
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 4.91% · Oct 25, 2026
The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact via an AMQP request.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | qpid-cpp | 16.04 | 0.16-9build1 | vulnerable |
| Ubuntu | qpid-cpp | 16.04 | 0.16-9ubuntu1 | vulnerable |
| Ubuntu | qpid-cpp | 16.04 | 0.16-9ubuntu2 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: