CVE-2016-2166

—

CVSS 3.0

6.5 medium

EPSS

4%p90

Published

Apr 12, 2016 (Apr 12, 2016)

Modified

Jun 17, 2026

Description

The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.

Vendors: apache fedoraproject
Products: qpid proton, fedora
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news0 stories

No ingested article mentions this CVE yet.