CVE-2021-22117CWE-94

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local…

published May 18, 2021

CVSS
—
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00611 · 48.6th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2021-05-18T12:47Z
EPSS history
Timeline
  • 18 MAY 12:47Z
    RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local…
    cvelistv5