CVE-2021-43799

🗓️ 25 Jan 2022 21:07:15Reported by GitHub_MType

Zulip Server prior to 4.9 vulnerability in RabbitMQ default port configuratio

Reporter	Title	Published	Views	Family All 6
CNVD	Zulip server security feature issue vulnerability	27 Jan 202200:00	–	cnvd
Cvelist	CVE-2021-43799 RabbitMQ exposes ports with weak default secrets in Zulip Server	25 Jan 202220:55	–	cvelist
NVD	CVE-2021-43799	25 Jan 202221:15	–	nvd
Prion	Design/Logic Flaw	25 Jan 202221:15	–	prion
OSV	CVE-2021-43799	25 Jan 202221:15	–	osv
GithubExploit	Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Zulip	8 Dec 202100:47	–	githubexploit

Nvd

Vulners

Node

zulip zulipRange<4.9

[
  {
    "product": "zulip",
    "vendor": "zulip",
    "versions": [
      {
        "status": "affected",
        "version": "< 4.9"
      }
    ]
  }
]

Source	Link
github	www.github.com/zulip/zulip/security/advisories/GHSA-p663-wxvv-2fjp
github	www.github.com/gteissier/erl-matter
github	www.github.com/zulip/zulip/commit/a5496f4098e3998c9b84e8dc564aa983d6cdf6e8
github	www.github.com/zulip/zulip/releases/tag/4.9

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Jan 2022 21:15Current

9.4High risk

Vulners AI Score9.4

CVSS25

CVSS39.8

EPSS0.029

CWE-338