Auth bypass in Red Hat Enterprise Mrg

CVE-2011-2925

Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to bypass authentication and perform unauthorized actions on jobs and message queues via a direct connection to the broker.

Vulnerability class: Broken Authentication

EPSS: 0.004 (31.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References