An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 6.1 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| Primary | 2.0 | 4.3 | MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html | security_alert@emc.com | Third Party Advisory |
| https://pivotal.io/security/cve-2017-4965 | security_alert@emc.com | Mitigation Vendor Advisory |
| https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| https://pivotal.io/security/cve-2017-4965 | af854a3a-2127-422b-91ae-364da2661108 | Mitigation Vendor Advisory |