puppetlabs-rabbitmq 3.0 up to and including 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
voxpupuli rabbitmq 3.0.0 |
||
voxpupuli rabbitmq 3.1.0 |
||
voxpupuli rabbitmq 4.0.0 |