CVE-2024-25650

Insecure key exchange between Delinea PAM Secret Server 11.4 and the Distributed Engine 8.4.3 allows a PAM administrator to obtain the Symmetric Key used to encrypt RabbitMQ messages via crafted payloads to the /pre-authenticate, /authenticate, and /execute-and-respond REST API endpoints. This...

CVE-2023-26512

CVE-2023-26512 affects Apache EventMesh, specifically the rabbitmq-connector plugin . The issue is a CWE-502 deserialization of untrusted data in versions V1.7.0–V1.8.0 , on Windows, Linux, and macOS, allowing an attacker to send crafted RabbitMQ messages that may lead to remote code execution. T...

CVE-2023-26512: Deserialization of Untrusted Data

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh incubating V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master...