RHEL 7 : sensu (RHSA-2018:1606)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:1606 advisory. Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security fixes: Sensu's redaction function fails to handle the...

RHEL 7 : sensu (RHSA-2018:1112)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1112 advisory. Sensu is a monitoring framework that aims to be simple, malleable, and scalable. Security Fixes: Sensu's redaction function fails to handle the...

RHEL 7 : rabbitmq-server (RHSA-2017:0530)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:0530 advisory. RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable...

CVE-2023-46118 affecting package rabbitmq-server for versions less than 3.13.0-1

CVE-2023-46118 affecting package rabbitmq-server for versions less than 3.13.0-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: RabbitMQ protocol as used by IBM QRadar SIEM lacks certificate validation (CVE-2023-50949)

Summary The RabbitMQ protocol used by SOAR integration for IBM QRadar SIEM lacks certificate validation and could potentially enable MITM attacks. Vulnerability Details CVEID:CVE-2023-50949 DESCRIPTION: IBM QRadar could allow an unauthorized user to perform unauthorized actions due to improper...

The vulnerability of the RabbitMQ messaging broker lies in the lack of restrictions on the size of HTTP requests via the HTTP API, allowing attackers to trigger a service failure.

The vulnerability of the RabbitMQ messaging broker lies in the lack of restrictions on the size of HTTP requests, which made it vulnerable to processing very large messages. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20240402-18

A vulnerability in the multiprotocol messaging and streaming broker RabbitMQ is related to a HTTP API's lack of restriction on HTTP request body size, which made it vulnerable to very large messages. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

AZL-39719 CVE-2023-50966 affecting package rabbitmq-server for versions less than 3.13.7-1

erlang-jose aka JOSE for Erlang and Elixir through 1.11.6 allow attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value in a JOSE header...

AZL-39857 CVE-2023-50966 affecting package rabbitmq-server for versions less than 3.11.24-2

erlang-jose aka JOSE for Erlang and Elixir through 1.11.6 allow attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value in a JOSE header...

CVE-2024-25649

In Delinea PAM Secret Server 11.4, it is possible for an attacker with Administrator access to the Secret Server machine to read the following data from a memory dump: the decrypted master key, database credentials when SQL Server Authentication is enabled, the encryption key of RabbitMQ queue...

CVE-2024-25649

In Delinea PAM Secret Server 11.4, it is possible for an attacker with Administrator access to the Secret Server machine to read the following data from a memory dump: the decrypted master key, database credentials when SQL Server Authentication is enabled, the encryption key of RabbitMQ queue...

CVE-2024-25650

Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key used to encrypt RabbitMQ messages via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This...

CVE-2024-25650

CVE-2024-25650 describes an insecure key exchange between Delinea PAM Secret Server 11.4 and Distributed Engine 8.4.3, where a PAM administrator can obtain the Symmetric Key used to encrypt RabbitMQ messages by crafting payloads to the REST endpoints “/pre-authenticate”, “/authenticate”, and “/ex...

PT-2024-21064

Name of the Vulnerable Software and Affected Versions Delinea PAM Secret Server version 11.4 Description The issue allows an attacker with Administrator access to the Secret Server machine to read sensitive data from a memory dump, including the decrypted master key, database credentials when SQL...

CVE-2024-25650

Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key used to encrypt RabbitMQ messages via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This...

CVE-2024-25650

Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key used to encrypt RabbitMQ messages via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This...

PT-2024-21066 · Delinea · Delinea Pam Secret Server

Name of the Vulnerable Software and Affected Versions: Delinea PAM Secret Server version 11.4 Distributed Engine version 8.4.3 Description: The issue allows a PAM administrator to obtain the Symmetric Key used to encrypt RabbitMQ messages via crafted payloads to the "/pre-authenticate",...

The vulnerability of the data image management software in the Veritas NetBackup Snapshot Manager environment, related to errors in the certificate validation process, allows a perpetrator to interact with the RabbitMQ service.

The vulnerability of the data image management software in the context of Veritas NetBackup Snapshot Manager lies in errors related to the authentication process. Exploiting this vulnerability allows an attacker to interact with the RabbitMQ service remotely...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubescape, oauth2-proxy, rabbitmq-messaging-topology-operator, ko, argo-workflows, sops, sigstore-scaffolding, gomplate, dgraph, kube-rbac-proxy, spire-server, aactl, kargo, skopeo, cloudflared, nerdctl, timestamp-authority, tkn, melange, zot,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: timestamp-authority, kube-rbac-proxy-fips, argo-workflows, wolfictl, rancher-agent, kubescape, k3s, dgraph, step-ca, oauth2-proxy, fulcio-fips, gomplate-fips, slsa-verifier, ko-fips, caddy-fips, frp, rekor-fips, timestamp-authority-fips, temporal, tkn, zarf, zot,...