PT-2017-4069 · Pivotal+2 · Rabbitmq For Pcf+2

Published 2017-06-13 · Updated 2025-04-02 · CVE-2017-4966

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.4.x through 3.5.x and 3.6.x versions prior to 3.6.9 RabbitMQ for PCF versions 1.5.x and 1.6.x versions prior to 1.6.18 and 1.7.x versions prior to 1.7.15

Description The issue is related to the disclosure of information. It was discovered that the RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration. This makes it possible to retrieve them using a chained attack.

Recommendations For RabbitMQ versions 3.4.x through 3.5.x, update to version 3.6.9 or later to resolve the issue. For RabbitMQ 3.6.x versions prior to 3.6.9, update to version 3.6.9 or later to resolve the issue. For RabbitMQ for PCF versions 1.5.x, update to version 1.6.18 or later to resolve the issue. For RabbitMQ for PCF versions 1.6.x prior to 1.6.18, update to version 1.6.18 or later to resolve the issue. For RabbitMQ for PCF versions 1.7.x prior to 1.7.15, update to version 1.7.15 or later to resolve the issue. As a temporary workaround, consider clearing the browser's local storage to remove stored credentials until a patch is applied.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2021-01405

CVE-2017-4966

DLA-2710-1

DLA-2710-2

USN-6265-1

Affected Products

Rabbitmq

Rabbitmq For Pcf

Ubuntu

References · 36

• 🔥 https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-11287-DoS%20via%20Heap%20Overflow-RabbitMQ%20Web%20Management%20Plugin · Exploit
• https://osv.dev/vulnerability/CVE-2017-4966 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01405 · Security Note
• https://security-tracker.debian.org/tracker/source-package/rabbitmq-server · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2710-2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22116 · Security Note
• https://pivotal.io/security/cve-2017-4966 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11281 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4966 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-4966 · Security Note
• https://ubuntu.com/security/notices/USN-6265-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05251 · Security Note
• https://osv.dev/vulnerability/USN-6265-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-4966 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01441 · Security Note