Wind River Support Network

HomeDefectsLIN1022-4572
Fixed

LIN1022-4572 : Security Advisory - rabbitmq-c - CVE-2023-35789

Created: Jun 18, 2023    Updated: Nov 10, 2023
Resolved Date: Nov 6, 2023
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

CREATE(Triage):(User=admin) CVE-2023-35789 (https://nvd.nist.gov/vuln/detail/CVE-2023-35789)

CVEs


Live chat
Online