5

CVE-2014-9650

CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download parameter to api/definitions.

Data is provided by the National Vulnerability Database (NVD)
Broadcom ≫ Rabbitmq Server Version2.1.0
Broadcom ≫ Rabbitmq Server Version2.1.1
Broadcom ≫ Rabbitmq Server Version2.2.0
Broadcom ≫ Rabbitmq Server Version2.3.0
Broadcom ≫ Rabbitmq Server Version2.3.1
Broadcom ≫ Rabbitmq Server Version2.4.0
Broadcom ≫ Rabbitmq Server Version2.4.1
Broadcom ≫ Rabbitmq Server Version2.5.0
Broadcom ≫ Rabbitmq Server Version2.5.1
Broadcom ≫ Rabbitmq Server Version2.6.0
Broadcom ≫ Rabbitmq Server Version2.6.1
Broadcom ≫ Rabbitmq Server Version2.7.0
Broadcom ≫ Rabbitmq Server Version2.7.1
Broadcom ≫ Rabbitmq Server Version2.8.0
Broadcom ≫ Rabbitmq Server Version2.8.1
Broadcom ≫ Rabbitmq Server Version2.8.2
Broadcom ≫ Rabbitmq Server Version2.8.3
Broadcom ≫ Rabbitmq Server Version2.8.4
Broadcom ≫ Rabbitmq Server Version2.8.5
Broadcom ≫ Rabbitmq Server Version2.8.6
Broadcom ≫ Rabbitmq Server Version2.8.7
Broadcom ≫ Rabbitmq Server Version3.0.0
Broadcom ≫ Rabbitmq Server Version3.0.1
Broadcom ≫ Rabbitmq Server Version3.0.2
Broadcom ≫ Rabbitmq Server Version3.0.3
Broadcom ≫ Rabbitmq Server Version3.0.4
Broadcom ≫ Rabbitmq Server Version3.1.0
Broadcom ≫ Rabbitmq Server Version3.1.1
Broadcom ≫ Rabbitmq Server Version3.1.2
Broadcom ≫ Rabbitmq Server Version3.1.3
Broadcom ≫ Rabbitmq Server Version3.1.4
Broadcom ≫ Rabbitmq Server Version3.1.5
Broadcom ≫ Rabbitmq Server Version3.2.0
Broadcom ≫ Rabbitmq Server Version3.2.1
Broadcom ≫ Rabbitmq Server Version3.2.2
Broadcom ≫ Rabbitmq Server Version3.2.3
Broadcom ≫ Rabbitmq Server Version3.2.4
Broadcom ≫ Rabbitmq Server Version3.3.0
Broadcom ≫ Rabbitmq Server Version3.3.1
Broadcom ≫ Rabbitmq Server Version3.3.2
Broadcom ≫ Rabbitmq Server Version3.3.3
Broadcom ≫ Rabbitmq Server Version3.3.4
Broadcom ≫ Rabbitmq Server Version3.3.5
Broadcom ≫ Rabbitmq Server Version3.4.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.34% 0.561
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N