CVE-2020-36282: Critical severity rabbitmq (pivotal software) vulnerability
Published Mar 12, 2021
·Updated
JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data.
Affected Software
2 affected components
RabbitMQ Jms Client Rabbitmq>=1.0.0<1.15.2
RabbitMQ Jms Client Rabbitmq>=2.0.0<2.2.0
Remediation
Patch Available
Event History
Mar 12, 2021
CVE Published
via MITRE·12:27 AM
Data Sourced
via MITRE·12:27 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-36282?
CVE-2020-36282 is considered high severity due to its potential for code execution via unsafe deserialization.
2
How do I fix CVE-2020-36282?
To mitigate CVE-2020-36282, upgrade to RabbitMQ JMS Client version 1.15.2 or 2.2.0 or later.
3
What versions of RabbitMQ JMS Client are affected by CVE-2020-36282?
CVE-2020-36282 affects RabbitMQ JMS Client versions prior to 1.15.2 and 2.2.0.
4
What type of vulnerability is CVE-2020-36282?
CVE-2020-36282 is a vulnerability associated with unsafe deserialization leading to potential remote code execution.
5
Can I continue using RabbitMQ JMS Client if I am on an affected version of CVE-2020-36282?
If you are using an affected version of RabbitMQ JMS Client, you should upgrade immediately to avoid security risks.