Lucene search
Veracode Vulnerability DatabaseVERACODE:37446HistoryOct 09, 2022 - 12:42 a.m.
Information Disclosure
2022-10-0900:42:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
rabbitmq-server
vulnerability
information disclosure
encryption keys
shovel plugin
federation plugin
attackers
sensitive information
0.001 Low
EPSS
Percentile
45.0%
rabbitmq-server is vulnerable to information disclosure. The vulnerability is due to a lack of validated encryption keys in shovel and federation plugins which allows attackers to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rabbitmq-server:sid | eq | 3.8.9-1 | |
| rabbitmq-server:bookworm | eq | 3.8.9-3 | |
| rabbitmq-server:sid | eq | 3.8.9-1 | |
| rabbitmq-server:bookworm | eq | 3.8.9-3 |
Related
redhatcve
redhatcve
CVE-2022-31008
2022-11-09 18:02:32
debiancve
debiancve
CVE-2022-31008
2022-10-06 18:16:00
cve
cve
CVE-2022-31008
2022-10-06 18:16:00
prion
prion
Code injection
2022-10-06 18:16:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4378-1)
2022-12-09 00:00:00
osv
osv
BIT-rabbitmq-2022-31008
2024-03-06 11:03:11
CVE-2022-31008
2022-10-06 18:16:00
nessus
nessus
ubuntucve
ubuntucve
CVE-2022-31008
2022-10-06 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-31008
2022-10-06 18:16:00