An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

🗓️ 14 Mar 2025 07:00:00Reported by MicrosoftType

Credentials on the command line in rabbitmq-c up to 0.13.0; exposed to local attackers.

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Insecure credentials submission in the RHEL UBI (CVE-2023-35789)	19 Jul 202421:48	–	ibm
FreeBSD	RabbitMQ-C -- auth credentials visible in commandline tool options	19 Sep 201900:00	–	freebsd
Tenable Nessus	Alibaba Cloud Linux 3 : 0059: librabbitmq (ALINUX3-SA-2024:0059)	14 May 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: librabbitmq (CVE-2023-35789)	22 Jan 202600:00	–	nessus
Tenable Nessus	CentOS 8 : librabbitmq (CESA-2023:7150)	14 Nov 202300:00	–	nessus
Tenable Nessus	Debian dla-4096 : amqp-tools - security update	29 Mar 202500:00	–	nessus
Tenable Nessus	FreeBSD : RabbitMQ-C -- auth credentials visible in commandline tool options (7e9cc7fd-6b3e-46c5-ad6d-409d90d41bbf)	30 Aug 202400:00	–	nessus
Tenable Nessus	MiracleLinux 8 : librabbitmq-0.9.0-4.el8 (AXSA:2023-7127:02)	20 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 9 : librabbitmq (ELSA-2023-6482)	16 Nov 202300:00	–	nessus
Tenable Nessus	Oracle Linux 8 : librabbitmq (ELSA-2023-7150)	21 Nov 202300:00	–	nessus