Логотип exploitDog
bind: "CVE-2025-50200"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-50200"

Количество 8

Количество 8

ubuntu логотип

CVE-2025-50200

7 месяцев назад

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2025-50200

7 месяцев назад

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

CVSS3: 4.4
EPSS: Низкий
nvd логотип

CVE-2025-50200

7 месяцев назад

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2025-50200

4 месяца назад

RabbitMQ Node can log Basic Auth header from an HTTP request

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2025-50200

7 месяцев назад

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and p ...

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3809-1

3 месяца назад

Security update for rabbitmq-server

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03234-1

4 месяца назад

Security update for rabbitmq-server313

EPSS: Низкий
redos логотип

ROS-20251029-02

3 месяца назад

Уязвимость rabbitmq-server

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

CVSS3: 5.5
0%
Низкий
7 месяцев назад
redhat логотип
CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

CVSS3: 4.4
0%
Низкий
7 месяцев назад
nvd логотип
CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

CVSS3: 5.5
0%
Низкий
7 месяцев назад
msrc логотип
CVE-2025-50200

RabbitMQ Node can log Basic Auth header from an HTTP request

CVSS3: 5.5
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and p ...

CVSS3: 5.5
0%
Низкий
7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:3809-1

Security update for rabbitmq-server

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:03234-1

Security update for rabbitmq-server313

0%
Низкий
4 месяца назад
redos логотип
ROS-20251029-02

Уязвимость rabbitmq-server

CVSS3: 5.5
0%
Низкий
3 месяца назад

Уязвимостей на страницу