[FFmpeg-trac] #9499(avformat:new): The libamqp.c file has a plaintext password, and the amqp network protocol has security problems.
FFmpeg
trac at avcodec.org
Mon Nov 8 10:36:41 EET 2021
#9499: The libamqp.c file has a plaintext password, and the amqp network protocol
has security problems.
-------------------------------------+-------------------------------------
Reporter: wujian | Owner: (none)
Type: defect | Status: new
Priority: normal | Component: avformat
Version: unspecified | Resolution:
Keywords: amqp | Blocked By:
network protocol security |
problems |
Blocking: | Reproduced by developer: 0
Analyzed by developer: 0 |
-------------------------------------+-------------------------------------
Comment (by wujian):
Replying to [comment:2 Marton Balint]:
> How is this a security issue?
If user and password is null, they will use the clear text "guest" as user
and pasword to amqp_login.
--
Ticket URL: <https://trac.ffmpeg.org/ticket/9499#comment:3>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker
More information about the FFmpeg-trac
mailing list