CVE-2020-5419
Medium
Description
RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
Product
Broadcom Rabbitmq Server
PublishedAug 31, 2020
First seenAug 31, 2020
Weakness typeCWE-427CWE-427
How to fix
Update
- broadcom rabbitmq_server3.8.7 or later
- pivotal_software rabbitmq3.7.28 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom rabbitmq_server | 3.8.0 ≤ v < 3.8.7 | 3.8.7 |
| pivotal_software rabbitmq | v < 3.7.28 | 3.7.28 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.