RabbitMQ Server < 3.4.0 Security Bypass Vulnerability - Active Check

RabbitMQ Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:rabbitmq";...

Design/Logic Flaw

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopbackusers restriction via a crafted X-Forwareded-For header...

PT-2015-4244

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.4.0 Description The issue allows remote attackers to bypass the loopback users restriction. This is achieved by sending a crafted X-Forwarded-For header. Recommendations For versions prior to 3.4.0, update to versi...