RabbitMQ < 3.13.8 (GHSA-gh3x-4x42-fvq8)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(240739);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/10/23");

  script_cve_id("CVE-2025-50200");
  script_xref(name:"IAVA", value:"2025-A-0446");

  script_name(english:"RabbitMQ < 3.13.8 (GHSA-gh3x-4x42-fvq8)");

  script_set_attribute(attribute:"synopsis", value:
"The RabbitMQ installed on the remote host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
  "RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers 
  in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with 
  all headers in request, including authorization headers which show base64 encoded username:password. This is easy to 
  decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been 
  patched in version 4.0.8.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
# https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-gh3x-4x42-fvq8
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b8e3fcc7");
  script_set_attribute(attribute:"solution", value:
"Upgrade to RabbitMQ version 3.13.8 or later.");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-50200");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/06/19");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/06/19");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/06/27");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:pivotal_software:rabbitmq");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("vmware_rabbitmq_win_installed.nbin");
  script_require_keys("installed_sw/RabbitMQ");

  exit(0);
}
include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [
    {'scope': 'target', 'match': {'os': 'windows'}}
  ],
  'checks': [
    {
      'product': {'name': 'RabbitMQ', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'min_version': '0.0', 'max_version':'3.13.7', 'fixed_display':'Upgrade to 3.13.8 / 4.0.8 / 4.1.0'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:result);