Read the docs

Spring by Pivotal

Records146All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical30CVSS 9.0–10.0
CVSS high64CVSS 7.0–8.9

Exploited now

Spring by Pivotal records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Rabbitmq · all components

Priority MEDIUM 40

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04397 Published 2019-11-22 Partial fix · 1.16.7, 1.17.4 +4 CWE-400
Priority MEDIUM 40

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster.

CVSS 3.0HIGH 8.5 Network Low privileges No interaction EPSS 0.0183 Published 2018-12-10 Will not fix CWE-330
TI-2017-03091 CVE-2017-4966 · GHSA-cp6g-c34h-69q7

Information disclosure in Pivotal RabbitMQ

Priority LOW 34

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0037 Published 2017-06-13 Will not fix CWE-200
TI-2017-03090 CVE-2017-4965 · GHSA-734q-gfvq-r9w2

Cross-site scripting in Pivotal RabbitMQ

Priority LOW 31

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01717 Published 2017-06-13 Will not fix CWE-79
Priority LOW 30

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00452 Published 2020-08-31 Fixed in 3.7.28, 3.8.7 CWE-427
TI-2017-03092 CVE-2017-4967 · GHSA-6276-fpxw-7hf6

Cross-site scripting in Pivotal RabbitMQ

Priority LOW 29

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00985 Published 2017-06-13 Will not fix CWE-79
TI-2019-08439 CVE-2019-11281 · GHSA-8v5q-8hwh-h2x8

RabbitMQ XSS attack

Priority LOW 24

Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits p…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01165 Published 2019-10-16 Partial fix · v3.7.18, 1.15.13 +2 CWE-79
Open these records in search →