Red Hat Security AdvisoryRHSA-2016:0308
rabbitmq-server security and bugfix update
Released 2016-02-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 rabbitmq-server-3.3.5-18.el7ost
Fixes 2 records
Priority LOW 28
CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download par…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02622 · Published 2015-01-27 · Partial fix
Priority LOW 25
Cross-site scripting (XSS) vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the path info to api/, which is not proper…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02313 · Published 2015-01-27 · Partial fix CWE-79
