CVE-2019-0223

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

6.22% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 93.3% of scored records. A rank, not a probability.

NVD base score

7.4 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-04-23 15:57Z7 YR AGO

Last updated

2024-08-04 17:44Z2 YR AGO

Reserved

2018-11-14

Assigning CNA

apache

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-325Missing Cryptographic StepBase

Data version

5.1

Document digest

5ee1e48ab42161bc0319874e65de40dd70a826e39b20c361ac13ac23910e070b

• lists.apache.org[qpid-dev] 20190423 [jira] [Updated] (PROTON-2014) [CVE-2019-0223] TLS Man in the Middle Vulnerabilityhttps://lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b%40%3Cdev.qpid.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[qpid-dev] 20190423 [SECURITY] CVE-2019-0223: Apache Qpid Proton TLS Man in the Middle Vulnerabilityhttps://lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5%40%3Cdev.qpid.apache.org%3Emailing-listx_refsource_MLIST
• www.openwall.com[oss-security] 20190423 [SECURITY] CVE-2019-0223: Apache Qpid Proton TLS Man in the Middle Vulnerabilityhttp://www.openwall.com/lists/oss-security/2019/04/23/4mailing-listx_refsource_MLIST
• lists.apache.org[announce] 20190423 [SECURITY] CVE-2019-0223: Apache Qpid Proton TLS Man in the Middle Vulnerabilityhttps://lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0%40%3Cannounce.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[SECURITY] CVE-2019-0223: Apache Qpid Proton TLS Man in the Middle Vulnerabilityhttps://lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f%40%3Cusers.qpid.apache.org%3Emailing-listx_refsource_MLIST
• issues.apache.orghttps://issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanelx_refsource_MISC
• lists.apache.orgqpid-commits] 20190423 [qpid-site] branch asf-site updated: update site content for CVE-2019-0223https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3Emailing-listx_refsource_MLIST
• www.securityfocus.com108044http://www.securityfocus.com/bid/108044vdb-entryx_refsource_BID
• access.redhat.comRHSA-2019:0886https://access.redhat.com/errata/RHSA-2019:0886vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:1399https://access.redhat.com/errata/RHSA-2019:1399vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:1400https://access.redhat.com/errata/RHSA-2019:1400vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:1398https://access.redhat.com/errata/RHSA-2019:1398vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:2777https://access.redhat.com/errata/RHSA-2019:2777vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:2778https://access.redhat.com/errata/RHSA-2019:2778vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:2779https://access.redhat.com/errata/RHSA-2019:2779vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:2780https://access.redhat.com/errata/RHSA-2019:2780vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:2781https://access.redhat.com/errata/RHSA-2019:2781vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:2782https://access.redhat.com/errata/RHSA-2019:2782vendor-advisoryx_refsource_REDHAT