rabbitmq-server: rabbitmq-server: Authentication Denial of Service via unvalidated JWKS HTTP response status codes

A flaw was found in rabbitmq-server. When retrieving cryptographic signing keys from an identity provider's JSON Web Key Set JWKS endpoint, the server fails to validate HTTP response status codes. If an error response is returned with valid JSON lacking key data, all previously cached signing key...