CVE-2014-9568

puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2015-02-03

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Rabbitmq (Voxpupuli)

References

• http://puppetlabs.com/security/cve/cve-2014-9568