CVE-2014-9494

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header

published January 20, 2015

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01393 · 72.0th percentile
Published
2015-01-20T15:00Z
EPSS history
Timeline
  • 20 JAN 15:00Z
    RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header
    cvelistv5