DEBIAN-CVE-2026-57218

RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.updatesecret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after...

CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

PT-2025-5358 · Jenkins · Jenkins Eiffel Broadcaster Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Eiffel Broadcaster Plugin versions 2.8.0 through 2.10.2 Description: The issue allows attackers to create a credential with the same ID as a legitimate one in a different credentials store, enabling them to sign an event published to...

CVE-2021-0279

Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...

The vulnerability of the RabbitMQ messaging broker’s Java framework and Apache Camel allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the RabbitMQ Java framework of Apache Camel broker is related to the recovery of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Authentication flaw

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...

CVE-2018-11050

Dell EMC NetWorker is affected by CVE-2018-11050 in versions 9.0–9.1.1.8, 9.2.1.3, and 18.1.0.1. The issue is a Clear-Text authentication over the network in the RabbitMQ AMQP component, causing user credentials to be sent unencrypted to the remote AMQP service. An unauthenticated attacker on the...

CVE-2018-11050

Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol AMQP component. User credentials are sent unencrypted to the remote AMQP service. An...

sensu: Password exposure in warn level log when configured for multiple rabbitMQ connections

Sensu's redaction function fails to handle the redaction of sensitive data in deeply nested data structures, resulting in sensitive data, such as passwords, being logged in clear-text...