Debian/rabbitmq-server: medium 5.5
RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic
Action: Upgrade rabbitmq-server to 4.0.5-6+deb13u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.5-6+deb13u2 | - |
Fixed versions
| 4.0.5-6+deb13u2 |
Sources
published · modified · JSON