CVE-2017-15702

CVE-2017-15702 describes a critical vulnerability in Apache Qpid Broker-J versions 0.18 through 0.32, where a remote unauthenticated attacker can force the broker to use an authentication provider configured for a different port, specifically an HTTP port. This allows an attacker to bypass intended authentication mechanisms if the spoofed port has weaker security, potentially leading to full compromise (confidentiality, integrity, availability). Despite its critical CVSS score of 9.8, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.