Pivotal RabbitMQ 3.8.x < 3.8.16 Code Execution

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins. A malicious actor can execute arbitrary code on the running RabbitMQ server by adding arbitrary...

CVE-2021-22117

RabbitMQ on Windows prior to version 3.8.16 is vulnerable: the installer does not harden the plugin directory permissions, so an attacker with sufficient local filesystem access can add arbitrary plugins and potentially achieve code execution on the running server. Affected component is the Windo...