CVE-2026-92609

Summary

Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an authenticated management session via reuse of a session identifier retained across successful authentication.

This issue affects Apache Qpid Broker-J: through 10.1.0.

Users are recommended to upgrade to version 10.1.1, which fixes the issue.

Affected Software

VendorProductVersion RangeStatus
Apache Software FoundationApache Qpid Broker-J0 <= 10.1.0affected

Weaknesses

  • CWE-384: CWE-384 Session fixation

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References