CVE record · 1 source
CVE-2026-114230
When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames.
- Vendor
- Apache Software Foundation
- Product
- Apache Qpid Proton C
- Weakness
- CWE-305
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames.
When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass. However there will be no user name set so the effects depend on how…