[FFmpeg-trac] #9499(avformat:new): The libamqp.c file has a plaintext password, and the amqp network protocol has security problems.

FFmpeg trac at avcodec.org
Mon Nov 8 10:36:41 EET 2021


#9499: The libamqp.c file has a plaintext password, and the amqp network protocol
has security problems.
-------------------------------------+-------------------------------------
             Reporter:  wujian       |                    Owner:  (none)
                 Type:  defect       |                   Status:  new
             Priority:  normal       |                Component:  avformat
              Version:  unspecified  |               Resolution:
             Keywords:  amqp         |               Blocked By:
  network protocol security          |
  problems                           |
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
Comment (by wujian):

 Replying to [comment:2 Marton Balint]:
 > How is this a security issue?
 If user and password is null, they will use the clear text "guest" as user
 and pasword to amqp_login.
-- 
Ticket URL: <https://trac.ffmpeg.org/ticket/9499#comment:3>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list