Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f9rc-w362-jp2c

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.

EPSS

Процентиль: 55%
0.00324
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 8.5
ubuntu
около 7 лет назад

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.

CVSS3: 6.5
redhat
около 7 лет назад

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.

CVSS3: 8.5
nvd
около 7 лет назад

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.

CVSS3: 8.5
debian
около 7 лет назад

Pivotal RabbitMQ for PCF, all versions, uses a deterministically gener ...

EPSS

Процентиль: 55%
0.00324
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-330