Medium WID-SEC-2022-1643 1 CVE

RabbitMQ: Schwachstelle ermöglicht Offenlegung von Informationen

Published Oct 6, 2022 · Updated Jun 30, 2026 · Revision 3 · de-DE

Vendor: SUSE Product: Linux Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in RabbitMQ ausnutzen, um Informationen offenzulegen.

Product

RabbitMQ ist ein Open-Source Message Broker.

Vulnerabilities 1

Medium 5.5

CVE-2022-31008

Predictable credential obfuscation seed value used in rabbitmq-server

RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This mea…

rabbitmq rabbitmq-server rabbitmq-server rabbit_common Debian Ubuntu Hex

Oct 6, 2022

Revision history

2026-06-30 #3
Referenz(en) aufgenommen: EUVD-2022-52713
2022-12-08 #2
Neue Updates von SUSE aufgenommen
2022-10-06 #1
Initiale Fassung

References

Github Security Advisory GHSA-v9gv-xp36-jgj8 vom 2022-10-06
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-v9gv-xp36-jgj8
NIST Database vom 2022-10-06
https://nvd.nist.gov/vuln/detail/CVE-2022-31008
SUSE Security Update SUSE-SU-2022:4378-1 vom 2022-12-08
https://lists.suse.com/pipermail/sle-security-updates/2022-December/013208.html