3203 matches found
BIT-AIRFLOW-2020-11981
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker Redis, RabbitMQ directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, flux-source-controller, terraform, rabbitmq-cluster-operator, dex, cadvisor, argo-workflows-fips, syft, kube-rbac-proxy-fips, buf, atlantis, kine, kyverno-policy-reporter, kaf, boring-registry,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: direnv, newrelic-infra-operator, wire-go, secrets-store-csi-driver-provider-aws, kyverno-policy-reporter, slsa-verifier, metallb, prometheus-pushgateway, kine, fuse-overlayfs-snapshotter, cert-exporter, kubeflow-pipelines, pulumi-kubernetes-operator, kwok, scorecard,...
openSUSE: Security Advisory for rabbitmq (SUSE-SU-2023:4939-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2023:2823-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NI FlexLogger RabbitMQ Incorrect Permission Assignment Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...
CVE-2024-1156
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges...
CVE-2024-1156
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges...
Design/Logic Flaw
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges...
CVE-2024-1156
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges...
CVE-2024-1156
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges...
CVE-2024-1156
The CVE-2024-1156 issue concerns NI SystemLink/FlexLogger RabbitMQ configuration permissions. Concretely, several sources describe incorrect directory/file permissions on the shared RabbitMQ service that can let a local authenticated user read RabbitMQ configuration information and potentially es...
NI SystemLink Server Security Vulnerability
NI SystemLink Server is an application from NI that helps engineers implement cost-effective and locally managed test and measurement standardization, automation and digitization tools. A security vulnerability exists in NI SystemLink Server 2023 Q3 and prior versions, which stems from a failure ...
CVE-2024-1156: Incorrect Default Permissions
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges...
PT-2024-17092
Name of the Vulnerable Software and Affected Versions NI FlexLogger affected versions not specified Description The issue concerns incorrect directory permissions for the shared NI RabbitMQ service, which may allow a local authenticated user to read RabbitMQ configuration information. This could...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in RabbitMQ Java Client [CVE-2023-46120]
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in RabbitMQ Java Client, caused by no message size limit in maxBodyLebgth. CVE-2023-46120. RabbitMQ is a database used in one of our Speech microservices. This vulnerabilitiy has been...
Kafka vs RabbitMQ
An Intro to Kafka and RabbitMQ: The Masters of Messaging In the realm of messaging systems, two names stand out: Kafka and RabbitMQ. These two powerhouses have become the go-to solutions for developers and organizations looking to handle high-volume, real-time data processing and messaging. But...
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (rabbitmq-server) security update
An update for rabbitmq-server is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
rabbitmq-server: DoS by publishing large messages over the HTTP API
A flaw was found in the rabbitmq-server. An authenticated user with sufficient credentials can publish very large messages over the HTTP API and cause the target node to be terminated by an "out-of-memory killer" like mechanism...
RHEL 9 : Red Hat OpenStack Platform 17.1 (rabbitmq-server) (RHSA-2024:0217)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:0217 advisory. RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable...