Read the docs
TI-2017-03091 Aliases CVE-2017-4966GHSA-cp6g-c34h-69q7

Information disclosure in Pivotal RabbitMQ

Priority LOW 34CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-200.

Summary

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack.

Why it matters now

EPSS 0.0037 31st percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Pivotal RabbitMQPivotal RabbitMQ—No fix listedCNA
  • Pivotal RabbitMQ Vendor— Affected Pivotal RabbitMQ Fixed in — No fix listed CNA

CPE configurations NVD · 69

CPEVersionsRoleVendor
cpe:2.3:a:broadcom:rabbitmq_server:3.4.0:*:*:*:*:*:*:*3.4.0VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.4.1:*:*:*:*:*:*:*3.4.1VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.4.2:*:*:*:*:*:*:*3.4.2VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.4.3:*:*:*:*:*:*:*3.4.3VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.4.4:*:*:*:*:*:*:*3.4.4VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.5.0:*:*:*:*:*:*:*3.5.0VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.5.1:*:*:*:*:*:*:*3.5.1VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.5.2:*:*:*:*:*:*:*3.5.2VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.5.3:*:*:*:*:*:*:*3.5.3VulnerableBroadcom
cpe:2.3:a:broadcom:rabbitmq_server:3.5.6:*:*:*:*:*:*:*3.5.6VulnerableBroadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.4.0:*:*:*:*:*:*:* Versions 3.4.0 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.4.4:*:*:*:*:*:*:* Versions 3.4.4 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.5.0:*:*:*:*:*:*:* Versions 3.5.0 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.5.1:*:*:*:*:*:*:* Versions 3.5.1 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.5.2:*:*:*:*:*:*:* Versions 3.5.2 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.5.3:*:*:*:*:*:*:* Versions 3.5.3 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:rabbitmq_server:3.5.6:*:*:*:*:*:*:* Versions 3.5.6 Vulnerable ·Broadcom
Show 59 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:broadcom:rabbitmq_server:3.6.7:*:*:*:*:*:*:*3.6.7VulnerableBroadcom
cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:*3.5.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:*3.5.5VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:*3.5.7VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:*3.6.0VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:*3.6.1VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:*3.6.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:*3.6.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:*3.6.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:*3.6.5VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:*3.6.6VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:*1.5.0VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:*1.5.1VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:*1.5.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:*1.5.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:*1.5.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:*1.5.5VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:*1.5.6VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:*1.5.7VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:*1.5.8VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:*1.5.9VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:*1.5.10VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:*1.5.11VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:*1.5.12VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:*1.5.13VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:*1.5.14VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:*1.5.15VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:*1.5.17VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:*1.5.18VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:*1.5.19VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:*1.6.0VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:*1.6.1VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:*1.6.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:*1.6.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:*1.6.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:*1.6.5VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:*1.6.6VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:*1.6.7VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:*1.6.8VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:*1.6.9VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:*1.6.10VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:*1.6.12VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:*1.6.13VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:*1.6.14VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:*1.6.15VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:*1.6.16VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:*1.7.0VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:*1.7.2VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:*1.7.3VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:*1.7.4VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:*1.7.5VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:*1.7.6VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:*1.7.7VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:*1.7.8VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:*1.7.9VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:*1.7.10VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:*1.7.13VulnerableSpring by Pivotal
cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:*1.7.14VulnerableSpring by Pivotal
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
  • cpe:2.3:a:broadcom:rabbitmq_server:3.6.7:*:*:*:*:*:*:* Versions 3.6.7 Vulnerable ·Broadcom
  • cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:* Versions 3.5.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:* Versions 3.5.5 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:* Versions 3.5.7 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:* Versions 3.6.0 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:* Versions 3.6.1 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:* Versions 3.6.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:* Versions 3.6.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:* Versions 3.6.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:* Versions 3.6.5 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:* Versions 3.6.6 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.0 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.1 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.5 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.6 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.7 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.8 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.9 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.10 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.11 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.12 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.13 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.14 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.15 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.17 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.18 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.5.19 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.0 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.1 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.5 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.6 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.7 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.8 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.9 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.10 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.12 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.13 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.14 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.15 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.6.16 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.0 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.2 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.3 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.4 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.5 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.6 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.7 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.8 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.9 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.10 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.13 Vulnerable ·Spring by Pivotal
  • cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:* Versions 1.7.14 Vulnerable ·Spring by Pivotal
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 11 (Ocata)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 8 (Liberty)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 9 (Mitaka)AffectedNo fix planned: Will not fix
Red Hat Storage Console 2AffectedNo fix planned: Will not fix

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-4966
  2. 2026-10-03 Alias added: GHSA-cp6g-c34h-69q7

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences