3203 matches found
CVE-2024-51988
RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the HTTP API was not verifying the configure permission of the user. Users who had all of the following: 1. Valid credentials, 2. Some permissions for the target virtual host & 3. HT...
RabbitMQ 访问控制错误漏洞
RabbitMQ is a feature-rich multi-protocol messaging and streaming agent open-sourced by RabbitMQ. An access control error vulnerability exists in RabbitMQ that stems from not validating a user's configure permissions when deleting a queue via the HTTP API. A user with valid credentials, partial...
CVE-2024-51988: Improper Access Control
RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the HTTP API was not verifying the configure permission of the user. Users who had all of the following: 1. Valid credentials, 2. Some permissions for the target virtual host & 3. HT...
PT-2024-35078
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.12.11 RabbitMQ Tanzu versions prior to 1.5.2 RabbitMQ Tanzu versions prior to 3.13.0 RabbitMQ Tanzu versions prior to 4.0.0 Description RabbitMQ is a feature-rich, multi-protocol messaging and streaming broker. In...
RHEL 7 : rabbitmq-server (RHSA-2017:0531)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:0531 advisory. RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable...
RHEL 7 : rabbitmq-server (RHSA-2016:0308)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:0308 advisory. RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and...
CVE-2023-50966 affecting package rabbitmq-server for versions less than 3.13.7-1
CVE-2023-50966 affecting package rabbitmq-server for versions less than 3.13.7-1. An upgraded version of the package is available that resolves this issue...
Security Bulletin: Vulnerability in RabbitMQ Java Client affects IBM watsonx.data
Summary RabbitMQ Java Client is vulnerable to a denial of service, caused by no message size limit in maxBodyLebgth. By sending a specially crafted message, a remote attacker could exploit this vulnerability to cause a memory overflow, and results in a denial of service condition. This can affect...
SolarWinds ARM 2024.3.1 Multiple Vulnerabilities (2024-3-1)
The version of SolarWinds ARM installed on the remote host is prior to 2024.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024-3-1 advisory. - SolarWinds Access Rights Manager ARM was found to contain a hard-coded credential authentication bypass vulnerability. ...
SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks
SolarWinds has released fixes to address two security flaws in its Access Rights Manager ARM software, including a critical vulnerability that could result in remote code execution. The vulnerability, tracked as CVE-2024-28991, is rated 9.0 out of a maximum of 10.0 on the CVSS scoring system. It...
The vulnerability of the SolarWinds Access Rights Manager software, which stems from the use of strictly encrypted credentials, allows a perpetrator to gain access to the RabbitMQ management console.
The vulnerability of the SolarWinds Access Rights Manager ARM lies in the use of strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the RabbitMQ management console remotely...
RHSA-2024:0217 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (rabbitmq-server) security update
Bulletin has no description...
RHSA-2022:8851 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (rabbitmq-server) security update
Bulletin has no description...
RHSA-2022:8867 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (rabbitmq-server) security update
Bulletin has no description...
RHSA-2020:0553 Red Hat Security Advisory: rabbitmq-server security update
Bulletin has no description...
RHSA-2020:0078 Red Hat Security Advisory: rabbitmq-server security update
Bulletin has no description...
RHSA-2017:0226 Red Hat Security Advisory: rabbitmq-server security update
Bulletin has no description...
RHSA-2017:0530 Red Hat Security Advisory: rabbitmq-server security and bug fix update
Bulletin has no description...