Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2020-5419

RabbitMQ arbitrary code execution using local binary planting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
pivotal

Description

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware Tanzu RabbitMQ

  • 3.7 to < 3.7.28affected
  • 3.8 to < 3.8.7affected

References