CVE-2021-22117

2021-05-1812:47:11

CWE-94

vmware

www.cve.org

rabbitmq

windows

installer

vulnerability

permissions

EPSS

Percentile

12.6%

JSON

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

CNA Affected

[
  {
    "product": "RabbitMQ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "RabbitMQ Windows installers prior to version 3.8.16"
      }
    ]
  }
]

References

tanzu.vmware.com/security/cve-2021-22117

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2021-22117