CVE-2017-4967

Опубликовано: 13 июн. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.

Ссылки

https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
Third Party Advisory
https://pivotal.io/security/cve-2017-4965
Mitigation
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
Third Party Advisory
https://pivotal.io/security/cve-2017-4965
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:rabbitmq_server:3.4.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.4.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.4.2:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.4.3:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.4.4:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.5.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.5.6:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:rabbitmq_server:3.6.7:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:*

cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:*

cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00509

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-4967

CVSS3: 6.1

ubuntu

больше 8 лет назад

CVE-2017-4967

CVSS3: 6.1

redhat

почти 9 лет назад

CVE-2017-4967

CVSS3: 6.1

debian

больше 8 лет назад

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x ...

GHSA-6276-fpxw-7hf6

CVSS3: 6.1

github

больше 3 лет назад

BDU:2021-01441

CVSS3: 6.1

fstec

больше 8 лет назад

Уязвимость брокера сообщений RabbitMQ, связанная с недостатками используемых мер по защите структур веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 66%

0.00509

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79