Design/Logic Flaw

2016-09-1802:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.2%

JSON

The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command lines of failed commands, which might allow context-dependent attackers to obtain sensitive information by reading the log data, as demonstrated by a syslog message that contains credentials from a command line.

CPENameOperatorVersion
rabbitmqeq1.6.2
rabbitmqeq1.6.1
rabbitmqeq1.6.3
rabbitmqeq1.6.0

Name	Operator	Version
rabbitmq	eq	1.6.2
rabbitmq	eq	1.6.1
rabbitmq	eq	1.6.3
rabbitmq	eq	1.6.0

References

www.securityfocus.com/bid/91801

pivotal.io/security/cve-2016-0929