Wind River Support Network

HomeDefectsLIN1021-5937
Fixed

LIN1021-5937 : Security Advisory - rabbitmq-c - CVE-2023-35789

Created: Jun 18, 2023    Updated: Jul 11, 2023
Resolved Date: Jul 11, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.19
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

CREATE(Triage):(User=admin) CVE-2023-35789 (https://nvd.nist.gov/vuln/detail/CVE-2023-35789)

CVEs


Live chat
Online