설치된 버전 확인
rabbitmqctl version영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2023-46118 | Denial of Service by publishing large messages over the HTTP API | < 3.11.24 ≥ 3.12.0 < 3.12.7 | 4.9 | — | 2023-10-25 | |
| CVE-2022-31008 | Predictable credential obfuscation seed value used in rabbitmq-server | < 3.8.32 | 5.5 | — | 2022-10-06 | |
| CVE-2021-32719 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ federation managemen... | < 3.8.18 | 3.1 | — | 2021-06-29 | |
| CVE-2021-32718 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI | < 3.8.17 | 3.1 | — | 2021-06-28 | |
| CVE-2021-22116 | RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input val... | < 3.8.16 | 7.5 | — | 2021-06-08 | |
| CVE-2020-5419 | RabbitMQ arbitrary code execution using local binary planting | < 3.7.28 | 6.7 | — | 2020-09-01 | |
| CVE-2019-11287 | RabbitMQ Web Management Plugin DoS via heap overflow | ≥ 1.16.0 < 1.16.7 ≥ 1.17.0 < 1.17.4 ≥ 3.7.0 < 3.7.21 | 4.5 | — | 2019-11-23 | |
| CVE-2019-11291 | RabbitMQ XSS attack via federation and shovel endpoints | ≥ 1.16.0 < 1.16.7 ≥ 1.17.0 < 1.17.4 | 3.1 | — | 2019-11-23 | |
| CVE-2019-11281 | RabbitMQ XSS attack | < 3.7.18 ≥ 1.15.0 < 1.15.13 ≥ 1.16.0 < 1.16.6 | 2.4 | — | 2019-10-17 | |
| CVE-2018-1279 | RabbitMQ cluster compromise due to deterministically generated cookie | * | 8.5 | — | 2018-12-11 | |
| CVE-2017-4965 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x... | = 3.5.4 = 3.5.5 = 3.5.7 | 6.1 | — | 2017-06-13 | |
| CVE-2017-4966 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x... | = 3.5.4 = 3.5.5 = 3.5.7 | 7.8 | — | 2017-06-13 | |
| CVE-2017-4967 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x... | = 3.5.4 = 3.5.5 = 3.5.7 | 6.1 | — | 2017-06-13 | |
| CVE-2016-9877 | An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x... | = 3.5.4 = 3.5.5 = 3.5.7 | 9.8 | — | 2016-12-29 | |
| CVE-2015-8786 | The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to ca... | = 3.6.0 | 6.5 | — | 2016-12-10 | |
| CVE-2016-0929 | The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs command l... | = 1.6.0 = 1.6.1 = 1.6.2 | 7.5 | — | 2016-09-18 | |
| CVE-2014-9494 | RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forware... | ≤ 3.3.5 | 5.0 | — | 2015-01-21 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).