Remote Code Execution Vulnerability in RabbitMQ by Pivotal Software
CVE-2014-9494

Currently unrated

Key Information:

Vendor: Pivotal Software
Status: RabbitMQ
Vendor: CVE Published:; 20 January 2015

🔔 Create Pivotal Software Vulnerability Alert

What is CVE-2014-9494?

A security vulnerability in RabbitMQ prior to version 3.4.0 enables remote attackers to bypass the loopback_users restriction. This can be accomplished by sending a specially crafted X-Forwarded-For header, potentially exposing unauthorized access to sensitive system resources. It is essential for users to upgrade to a patched version to mitigate risks associated with this vulnerability.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/99685

vdb-entryx_refsource_XF

https://groups.google.com/forum/#%21topic/rabbitmq-users/...

x_refsource_CONFIRM

http://seclists.org/oss-sec/2015/q1/30

mailing-listx_refsource_MLIST

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 20, 2015
Vulnerability Reserved
Jan 3, 2015

CVE-2014-9494 Data

JSON