RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
vmware rabbitmq |