https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:17:03 +0000 https://cve.radiocsirt.org/vuln/bit-rabbitmq-2022-31008 <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.</p> <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.</p> https://cve.radiocsirt.org/vuln/bit-rabbitmq-2022-31008 https://cve.radiocsirt.org/vuln/euvd-2026-233544 EUVD-2026-233544 https://cve.radiocsirt.org/vuln/euvd-2026-233544 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31008 <p>RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.</p> <p>RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31008 https://cve.radiocsirt.org/vuln/ghsa-v9gv-xp36-jgj8 <p><strong>Affected:</strong> Hex: rabbit_common</p> <p>### Impact</p> <p>Shovel and Federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret.</p> <p>This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log.</p> <p>Patched versions correctly use a cluster-wide secret for that purpose.</p> <p>### Patches</p> <p>Patched versions:</p> <p>* `3.10.2` * `3.9.18` * `3.8.32`</p> <p>### Workarounds</p> <p>Disable Shovel and Federation plugins.</p> <p>### Credits</p> <p>RabbitMQ core team would like to thank Lajos @luos Gerecs and Anh Nguyen from Erlang Solutions for responsibly disclosing and working with us on a patch for this vulnerability.</p> <p>### For more information</p> <p>* [Mailing list](https://groups.google.com/forum/#!forum/rabbitmq-users) * [Community Slack](https://rabbitmq-slack.herokuapp.com/)</p> <p><strong>Affected:</strong> Hex: rabbit_common</p> <p>### Impact</p> <p>Shovel and Federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret.</p> <p>This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log.</p> <p>Patched versions correctly use a cluster-wide secret for that purpose.</p> <p>### Patches</p> <p>Patched versions:</p> <p>* `3.10.2` * `3.9.18` * `3.8.32`</p> <p>### Workarounds</p> <p>Disable Shovel and Federation plugins.</p> <p>### Credits</p> <p>RabbitMQ core team would like to thank Lajos @luos Gerecs and Anh Nguyen from Erlang Solutions for responsibly disclosing and working with us on a patch for this vulnerability.</p> <p>### For more information</p> <p>* [Mailing list](https://groups.google.com/forum/#!forum/rabbitmq-users) * [Community Slack](https://rabbitmq-slack.herokuapp.com/)</p> https://cve.radiocsirt.org/vuln/ghsa-v9gv-xp36-jgj8 https://cve.radiocsirt.org/vuln/gsd-2022-31008 gsd-2022-31008 https://cve.radiocsirt.org/vuln/gsd-2022-31008 https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31008 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: broker</p> <p>RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: broker</p> <p>RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31008 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1643 <p>Ein lokaler Angreifer kann eine Schwachstelle in RabbitMQ ausnutzen, um Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in RabbitMQ ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1643