Lucene search
FreeBSD7E9CC7FD-6B3E-46C5-AD6D-409D90D41BBFHistorySep 19, 2019 - 12:00 a.m.
RabbitMQ-C -- auth credentials visible in commandline tool options
2019-09-1900:00:00
vuxml.freebsd.org
3
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
Low
hadmut reports:
This C library includes 2 command-line tools that can take
credentials as command-line options. The credentials are exposed
as plain-text in the process list. This could allow an attacker
with access to the process list to see the credentials.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | rabbitmq-c | < 0.14.0 | UNKNOWN |
References
Related
osv
osv
CVE-2023-35789
2023-06-16 21:15:09
Moderate: librabbitmq security update
2023-11-07 00:00:00
Moderate: librabbitmq security update
2023-11-14 00:00:00
prion
prion
Design/Logic Flaw
2023-06-16 21:15:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2823-1)
2024-02-28 00:00:00
almalinux
almalinux
Moderate: librabbitmq security update
2023-11-14 00:00:00
Moderate: librabbitmq security update
2023-11-07 00:00:00
nvd
nvd
CVE-2023-35789
2023-06-16 21:15:09
nessus
nessus
RHEL 8 : librabbitmq (RHSA-2023:7150)
2023-11-14 00:00:00
CentOS 8 : librabbitmq (CESA-2023:7150)
2023-11-14 00:00:00
redhatcve
redhatcve
CVE-2023-35789
2023-06-26 06:47:02
redhat
redhat
(RHSA-2023:7150) Moderate: librabbitmq security update
2023-11-14 08:46:38
(RHSA-2023:6482) Moderate: librabbitmq security update
2023-11-07 06:06:36
cve
cve
CVE-2023-35789
2023-06-16 21:15:09
oraclelinux
oraclelinux
librabbitmq security update
2023-11-17 00:00:00
librabbitmq security update
2023-11-11 00:00:00
cvelist
cvelist
CVE-2023-35789
2023-06-16 00:00:00
debiancve
debiancve
CVE-2023-35789
2023-06-16 21:15:09
alpinelinux
alpinelinux
CVE-2023-35789
2023-06-16 21:15:09
ibm
ibm
ubuntucve
ubuntucve
CVE-2023-35789
2023-06-16 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
Low
Related for 7E9CC7FD-6B3E-46C5-AD6D-409D90D41BBF