An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-librabbitmqalma-upgrade-librabbitmq-develalma-upgrade-librabbitmq-tools | Nov 16, 2023 | Jun 16, 2023 | |
| Alpine Linux | alpine-linux-upgrade-rabbitmq-c | Mar 21, 2024 | Jun 16, 2023 | |
| Centos_linux | — | centos-upgrade-librabbitmqcentos-upgrade-librabbitmq-debuginfocentos-upgrade-librabbitmq-debugsourcecentos-upgrade-librabbitmq-toolscentos-upgrade-librabbitmq-tools-debuginfo | Nov 8, 2023 | Jun 16, 2023 |
| Debian | debian-upgrade-librabbitmq | Mar 17, 2025 | Jun 16, 2023 | |
| Freebsd | freebsd-upgrade-package-rabbitmq-c | Aug 30, 2024 | Aug 30, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-librabbitmqoracle-linux-upgrade-librabbitmq-develoracle-linux-upgrade-librabbitmq-tools | Nov 22, 2023 | Jun 16, 2023 |
| Redhat_linux | redhat-upgrade-librabbitmqredhat-upgrade-librabbitmq-debuginforedhat-upgrade-librabbitmq-debugsourceredhat-upgrade-librabbitmq-develredhat-upgrade-librabbitmq-toolsredhat-upgrade-librabbitmq-tools-debuginfo | Nov 8, 2023 | Jun 16, 2023 | |
| Rocky_linux | rocky-upgrade-librabbitmqrocky-upgrade-librabbitmq-debuginforocky-upgrade-librabbitmq-debugsourcerocky-upgrade-librabbitmq-develrocky-upgrade-librabbitmq-toolsrocky-upgrade-librabbitmq-tools-debuginfo | Jun 29, 2026 | Jun 25, 2026 | |
| Suse | — | suse-upgrade-librabbitmq-develsuse-upgrade-librabbitmq4suse-upgrade-rabbitmq-c-tools | Jul 17, 2023 | Jun 16, 2023 |
| Ubuntu | ubuntu-upgrade-amqp-toolsubuntu-upgrade-librabbitmq4 | Jun 17, 2026 | Jun 16, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub