Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-31008— Predictable credential obfuscation seed value used in rabbitmq-server

Quick assessment

Affected
rabbitmq rabbitmq-server
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

RabbitMQ是RabbitMQ开源的一个功能丰富的多协议消息和流媒体代理。 RabbitMQ存在安全漏洞，该漏洞源于其shovel和federation插件在其worker（link）状态下执行URI混淆。用于加密URI的加密密钥带有可预测的内容。这意味着，在与Shovel和Federation插件相关的某些异常情况下，节点日志中可能会出现相当容易消除混淆的数据。

CVSS 5.5 · Medium EPSS 0.34% · P26

Possible ATT&CK Techniques 1 AI

T1005 · Data from Local System
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-31008

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Predictable credential obfuscation seed value used in rabbitmq-server
Source: CVE Program / CVE List V5
Vulnerability Description
RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用不充分的随机数
Source: CVE Program / CVE List V5
Vulnerability Title
RabbitMQ 安全特征问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RabbitMQ是RabbitMQ开源的一个功能丰富的多协议消息和流媒体代理。 RabbitMQ存在安全漏洞，该漏洞源于其shovel和federation插件在其worker（link）状态下执行URI混淆。用于加密URI的加密密钥带有可预测的内容。这意味着，在与Shovel和Federation插件相关的某些异常情况下，节点日志中可能会出现相当容易消除混淆的数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
rabbitmq rabbitmq-server < 3.8.32 -

II. Public POCs for CVE-2022-31008

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-31008

请登录查看更多情报信息。

Patches & Fixes for CVE-2022-31008 (1)

Vendor Advisories for CVE-2022-31008 (1)

IV. Related Vulnerabilities

Same product: rabbitmq-server
Same vendor: rabbitmq
Same weakness: CWE-330

V. Comments for CVE-2022-31008

No comments yet

Leave a comment