Security restrictions bypass in RabbitMQ - CVE-2018-1279
Published: December 11, 2018 / Updated: August 19, 2020
Vulnerability identifier: #VU16503
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1279
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote authenticated attacker to bypass security restrictions on the target system.
The vulnerability exists in Pivotal Software RabbitMQ due to improper security restrictions on servers in an MQ cluster. A remote authenticated attacker can use a deterministically generated cookie that is shared between all machines in the cluster of an affected system and gain unauthorized access, which could be used to conduct further attacks.
Affected software
RabbitMQ
How to mitigate CVE-2018-1279
Install update from vendor's website.