Incorrect Directory Permissions May Lead to RabbitMQ Configuration Information Exposure
CVE-2024-1156

7.8HIGH

Key Information:

Vendor

Ni

Status
Systemlink Server
Flexlogger
Vendor
CVE Published:
20 February 2024

What is CVE-2024-1156?

A vulnerability exists due to improper directory permissions in the shared NI RabbitMQ service. This flaw permits local authenticated users to access sensitive RabbitMQ configuration files, which can potentially be exploited to escalate privileges within the system. Organizations using the NI RabbitMQ Service should review their configurations and apply the recommended security measures to mitigate the risks associated with this exposure.

Affected Version(s)

FlexLogger Windows 0 <= 2022 Q3

SystemLink Server Windows 0 <= 2023 Q3

References

https://www.ni.com/en/support/security/available-critical...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.