CVE-2016-4432 (qpid_java)
The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to logging connection state.
Source: CVE-2016-4432 (qpid_java)