Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-9494

Fixed in a distro release EPSS 1%

RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header.

Published 2015-01-20 · CVE record · OSV

Products: pivotal_software rabbitmq

Distro releases

ReleasePackageFixed in
Debian 12rabbitmq-server3.4.1-1
Debian 13rabbitmq-server3.4.1-1
Debian 14rabbitmq-server3.4.1-1