3203 matches found
DLA-2710-2 rabbitmq-server - regression update
Bulletin has no description...
Debian: Security Advisory (DLA-2710-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2710-1] rabbitmq-server security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2710-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 19, 2021 https://wiki.debian.org/LTS -...
DLA-2710-1 rabbitmq-server - security update
Bulletin has no description...
Unspecified Vulnerability in Juniper Networks trail Cloud (CC)
Juniper Networks Contrail Cloud is a fully managed telecom cloud operation solution from Juniper Networks, Inc. A security vulnerability previously existed in Juniper Networks Contrail Cloud 13.6.0 that stemmed from enabling the RabbitMQ service by default and using hard-coded credentials. An...
CVE-2021-0279
Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...
CVE-2021-0279
Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...
Hardcoded credentials
Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...
CVE-2021-0279
CVE-2021-0279 concerns Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0, where the RabbitMQ service is enabled by default and uses hardcoded credentials. The result is that an attacker who can access the RabbitMQ administrative interface (for example, the GUI) may cause a Denial of S...
CVE-2021-0279 Contrail Cloud: Hardcoded credentials for RabbitMQ service
Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...
Juniper Networks Contrail Cloud 信任管理问题漏洞
Juniper Networks Contrail Cloud is a fully managed telecom cloud operation solution from Juniper Networks, Inc. A security vulnerability previously existed in Juniper Networks Contrail Cloud 13.6.0 that stemmed from enabling the RabbitMQ service by default and using hard-coded credentials. An...
CVE-2021-0279: Use of Hard-coded Credentials
Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...
PT-2021-3728
Name of the Vulnerable Software and Affected Versions Juniper Networks Contrail Cloud versions prior to 13.6.0 Description The issue is related to the use of hardcoded credentials in the RabbitMQ service, which is enabled by default. This service is used for coordinating operations and status...
The vulnerability of the rabbitmq_federation_management plugin of the RabbitMQ messaging broker allows a attacker to execute arbitrary code.
The vulnerability of the rabbitmqfederationmanagement plugin of the RabbitMQ messaging broker exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
[SECURITY] Fedora 33 Update: rabbitmq-server-3.8.18-1.fc33
RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker...
Fedora: Security Advisory for rabbitmq-server (FEDORA-2021-58ea3e138d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rabbitmq-server (FEDORA-2021-bf942f1fa3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[ASA-202107-17] rabbitmq: cross-site scripting
Arch Linux Security Advisory ASA-202107-17 ========================================== Severity: Low Date : 2021-07-06 CVE-ID : CVE-2021-32718 CVE-2021-32719 Package : rabbitmq Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-2109 Summary ======= The package...
Vulnerabilities fixed in RabbitMQ
Vulnerabilities have been fixed in RabbitMQ. The vulnerabilities allow a malicious person to execute arbitrary code under the user's privileges. RabbitMQ categorizes these vulnerabilities according to the CVSSv3 method with a highest score of 3.1. RabbitMQ has released updates to address the...
FreeBSD : RabbitMQ-C -- integer overflow leads to heap corruption (7c555ce3-658d-4589-83dd-4b6a31c5d610)
alanxz reports : When parsing a frame header, validate that the framesize is less than or equal to INT32MAX. Given framemax is limited between 0 and INT32MAX in amqplogin and friends, this does not change the API. This prevents a potential buffer overflow when a malicious client sends a framesize...