CVE-2017-4966
published 2017-06-13CVE-2017-4966: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.39%
31.5th percentile
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack.
Affected
74 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| broadcom | rabbitmq_server | — | — |
| debian | debian_linux | — | — |
| debian | rabbitmq-server | < rabbitmq-server 3.6.10-1 (bookworm) | rabbitmq-server 3.6.10-1 (bookworm) |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
| pivotal_software | rabbitmq | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv7.8HIGH
vendor_debian7.8LOW
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cp6g-c34h-69q7: An issue was discovered in these Pivotal RabbitMQ versions: all 3
ghsa_unreviewed·2022-05-13
CVE-2017-4966 [HIGH] CWE-200 GHSA-cp6g-c34h-69q7: An issue was discovered in these Pivotal RabbitMQ versions: all 3
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack.
OSV
CVE-2017-4966: An issue was discovered in these Pivotal RabbitMQ versions: all 3
osv·2017-06-13·CVSS 7.8
CVE-2017-4966 [HIGH] CVE-2017-4966: An issue was discovered in these Pivotal RabbitMQ versions: all 3
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack.
Ubuntu
RabbitMQ vulnerability
vendor_ubuntu·2023-07-31
CVE-2017-4966 RabbitMQ vulnerability
Title: RabbitMQ vulnerability
Summary: RabbitMQ could be made to expose sensitive information.
It was discovered that RabbitMQ incorrectly handled certain signed-in user
credentials. An attacker could possibly use this issue to expose
sensitive information.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
rabbitmq: Authentication details are stored in browser-local storage without expiration
vendor_redhat·2017-03-29·CVSS 7.8
CVE-2017-4966 [HIGH] CWE-522 rabbitmq: Authentication details are stored in browser-local storage without expiration
rabbitmq: Authentication details are stored in browser-local storage without expiration
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack.
Statement: This issue affects rabbitmq-server plugins as shipped with:
* Red Hat Storage Console 2
* Red Hat Enterprise Linux OpenStack Platform 5,6,7
* Red Hat OpenStack Platform 8,9,10,11
Although RabbitMQ plugins are shipped in these products, no plugins are enabled or used by def
Debian
CVE-2017-4966: rabbitmq-server - An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, ...
vendor_debian·2017·CVSS 7.8
CVE-2017-4966 [HIGH] CVE-2017-4966: rabbitmq-server - An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, ...
An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack.
Scope: local
bookworm: resolved (fixed in 3.6.10-1)
bullseye: resolved (fixed in 3.6.10-1)
forky: resolved (fixed in 3.6.10-1)
sid: resolved (fixed in 3.6.10-1)
trixie: resolved (fixed in 3.6.10-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-4966 rabbitmq: Authentication details are stored in browser-local storage without expiration
bugzilla·2017-05-05·CVSS 7.8
CVE-2017-4966 [HIGH] CVE-2017-4966 rabbitmq: Authentication details are stored in browser-local storage without expiration
CVE-2017-4966 rabbitmq: Authentication details are stored in browser-local storage without expiration
It was found that the rabbitmq authentication details are being stored indefinitely in the local browser cache.
External References:
https://github.com/rabbitmq/rabbitmq-server/releases/tag/rabbitmq_v3_6_9
Discussion:
Created rabbitmq-server tracking bugs for this issue:
Affects: epel-all [bug 1448338]
Affects: fedora-24 [bug 1448339]
---
upstream fix:
https://github.com/rabbitmq/rabbitmq-management/commit/2371633f99ad0d293899384f078872ff9e9f3e10
---
Statement:
This issue affects rabbitmq-server plugins as shipped with:
* Red Hat Storage Console 2
* Red Hat Enterprise Linux OpenStack Platform 5,6,7
* Red Hat OpenStack Platform 8,9,10,11
Although RabbitMQ plugins are shipped in
Bugzilla
CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [fedora-24]
bugzilla·2017-05-05·CVSS 6.1
CVE-2017-4965 [MEDIUM] CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [fedora-24]
CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [fedora-24]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-24.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Discussion:
Use the following template to for
Bugzilla
CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [epel-all]
bugzilla·2017-05-05·CVSS 6.1
CVE-2017-4965 [MEDIUM] CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [epel-all]
CVE-2017-4965 CVE-2017-4966 CVE-2017-4967 rabbitmq-server: various flaws [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported vers
Checkpoint
25th December – Threat Intelligence Report
blogs_checkpoint·2023-12-25·CVSS 7.5
CVE-2023-4966 [HIGH] 25th December – Threat Intelligence Report
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
## 25th December – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 25th December, please download our Threat_Intelligence Bulletin .
TOP ATTACKS AND BREACHES
Australia’s largest non-profit healthcare provider, St. Vincent’s Health Australia, experienced a cyberattack resulting in data theft from its networks. Vincent’s operates public and private hospitals, as well as elderly care facilities across New South Wales, Victoria, and Queensland, employing over 20,000 staff.
Xfin
2017-06-13
Published