Design/Logic Flaw

2015-02-0316:59:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter.

CPENameOperatorVersion
rabbitmqeq3.0.0
rabbitmqeq3.1.0
rabbitmqeq4.0.0

Name	Operator	Version
rabbitmq	eq	3.0.0
rabbitmq	eq	3.1.0
rabbitmq	eq	4.0.0

References

puppetlabs.com/security/cve/cve-2014-9568