Incorrect Directory Permissions May Lead to RabbitMQ Configuration Information Exposure
CVE-2024-1156

7.8HIGH

Key Information:

Vendor

Ni

Status
Systemlink Server
Flexlogger
Vendor
CVE Published:
20 February 2024

What is CVE-2024-1156?

A vulnerability exists due to improper directory permissions in the shared NI RabbitMQ service. This flaw permits local authenticated users to access sensitive RabbitMQ configuration files, which can potentially be exploited to escalate privileges within the system. Organizations using the NI RabbitMQ Service should review their configurations and apply the recommended security measures to mitigate the risks associated with this exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FlexLogger Windows 0 <= 2022 Q3

SystemLink Server Windows 0 <= 2023 Q3

References

https://www.ni.com/en/support/security/available-critical...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.