Skip to content
OpenAdvisories
Unscored CVE-2021-22117 EUVD-2021-9275GHSA-rwr9-36p6-24vw

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with suff…

Published May 18, 2021 · Updated Aug 3, 2024 · Assigned by vmware

Description

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

Affected products

VendorProductAffectedFixed
— RabbitMQ RabbitMQ Windows installers prior to version 3.8.16 —

References