RabbitMQ cluster compromise due to deterministically generated cookie
CVE-2018-1279

8.5HIGH

Key Information:

Vendor

Pivotal

Status
RabbitMQ For Pcf
Vendor
CVE Published:
10 December 2018

What is CVE-2018-1279?

Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.

Affected Version(s)

RabbitMq for PCF 1

References

https://pivotal.io/security/cve-2018-1279
x_refsource_CONFIRM

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

CVSS V3.0

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.