CVE-2021-22117

No fix known EPSS <1%

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

Published 2021-05-18 · CVE record · OSV

Products: broadcom rabbitmq_server