CVE-2012-4446

CVE-2012-4446 describes an authentication bypass vulnerability in Apache Qpid versions 0.20 and earlier. When the federation_tag attribute is enabled, the default configuration accepts AMQP connections without validating the source user ID, allowing remote attackers to bypass authentication and achieve partial confidentiality, integrity, and availability. This vulnerability has a CVSS score of 6.8 (Medium) due to its network-based attack vector and medium complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.