CVE-2021-32719 Information
Share on:
Jun 06, 2022
cve
Description
RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18 when a federation link was displayed in the RabbitMQ management UI via the rabbitmq_federation_management
plugin its consumer tag was rendered without proper
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Reference
https://github.com/rabbitmq/rabbitmq-server/pull/3122 https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-5452-hxj4-773x https://herolab.usd.de/security-advisories/usd-2021-0011/
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction Required
HIGH
Scope
REQUIRED
Confidentiality Impact
CHANGED
Integrity Impact
LOW
Availability Impact
LOW
Base Score
NONE
Base Severity
4.8