REDHAT-BUG-2215762: Medium severity RabbitMQ rabbitmq-c vulnerability

Q: Who can obtain the credentials?

A local attacker who can list running processes and their arguments can see credentials supplied to rabbitmq-c command-line tools.

Q: What must be true for exploitation?

Credentials must be provided on the command line, such as when using amqp-publish or amqp-consume. The attacker needs local access with the ability to view process listings and arguments.

Q: How can I determine whether credentials may have been exposed?

Check whether rabbitmq-c command-line utilities have been invoked with credentials in their command-line arguments. Any such credentials may have been visible to local users able to list those processes.

Published Jun 18, 2023

Updated

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

https://github.com/alanxz/rabbitmq-c/issues/575 https://github.com/alanxz/rabbitmq-c/pull/781

Affected Software

1 affected component

RabbitMQ rabbitmq-c<=0.13.0

Event History

Jun 18, 2023

Data Sourced

via Red Hat·02:30 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can obtain the credentials?

A local attacker who can list running processes and their arguments can see credentials supplied to rabbitmq-c command-line tools.

What must be true for exploitation?

Credentials must be provided on the command line, such as when using amqp-publish or amqp-consume. The attacker needs local access with the ability to view process listings and arguments.

How can I determine whether credentials may have been exposed?

Check whether rabbitmq-c command-line utilities have been invoked with credentials in their command-line arguments. Any such credentials may have been visible to local users able to list those processes.

REDHAT-BUG-2215762: Medium severity RabbitMQ rabbitmq-c vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can obtain the credentials?

What must be true for exploitation?

How can I determine whether credentials may have been exposed?

Company

Resources

Contact

Frequently Asked Questions

Who can obtain the credentials?

What must be true for exploitation?

How can I determine whether credentials may have been exposed?