Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-9650
HistoryJan 27, 2015 - 12:00 a.m.

CVE-2014-9650

2015-01-2700:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.8%

CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0
through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP
headers and conduct HTTP response splitting attacks via the download
parameter to api/definitions.

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.8%