漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Predictable credential obfuscation seed value used in rabbitmq-server
Vulnerability Description
RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
使用不充分的随机数
Vulnerability Title
RabbitMQ 安全特征问题漏洞
Vulnerability Description
RabbitMQ是RabbitMQ开源的一个功能丰富的多协议消息和流媒体代理。 RabbitMQ存在安全漏洞，该漏洞源于其shovel和federation插件在其worker（link）状态下执行URI混淆。用于加密URI的加密密钥带有可预测的内容。这意味着，在与Shovel和Federation插件相关的某些异常情况下，节点日志中可能会出现相当容易消除混淆的数据。
CVSS Information
N/A
Vulnerability Type
N/A