9.8

CVE-2016-9877

EPSS 1.38%
Veröffentlicht 29.12.2016 09:59:00
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

NVD 76 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Broadcom ≫ Rabbitmq Server Version 3.0.0

Broadcom ≫ Rabbitmq Server Version 3.0.1

Broadcom ≫ Rabbitmq Server Version 3.0.2

Broadcom ≫ Rabbitmq Server Version 3.0.3

Broadcom ≫ Rabbitmq Server Version 3.0.4

Broadcom ≫ Rabbitmq Server Version 3.1.0

Broadcom ≫ Rabbitmq Server Version 3.1.1

Broadcom ≫ Rabbitmq Server Version 3.1.2

Broadcom ≫ Rabbitmq Server Version 3.1.3

Broadcom ≫ Rabbitmq Server Version 3.1.4

Broadcom ≫ Rabbitmq Server Version 3.1.5

Broadcom ≫ Rabbitmq Server Version 3.2.0

Broadcom ≫ Rabbitmq Server Version 3.2.1

Broadcom ≫ Rabbitmq Server Version 3.2.2

Broadcom ≫ Rabbitmq Server Version 3.2.3

Broadcom ≫ Rabbitmq Server Version 3.2.4

Broadcom ≫ Rabbitmq Server Version 3.3.0

Broadcom ≫ Rabbitmq Server Version 3.3.1

Broadcom ≫ Rabbitmq Server Version 3.3.2

Broadcom ≫ Rabbitmq Server Version 3.3.3

Broadcom ≫ Rabbitmq Server Version 3.3.4

Broadcom ≫ Rabbitmq Server Version 3.3.5

Broadcom ≫ Rabbitmq Server Version 3.4.0

Broadcom ≫ Rabbitmq Server Version 3.4.1

Broadcom ≫ Rabbitmq Server Version 3.4.2

Broadcom ≫ Rabbitmq Server Version 3.4.3

Broadcom ≫ Rabbitmq Server Version 3.4.4

Broadcom ≫ Rabbitmq Server Version 3.5.0

Broadcom ≫ Rabbitmq Server Version 3.5.1

Broadcom ≫ Rabbitmq Server Version 3.5.2

Broadcom ≫ Rabbitmq Server Version 3.5.3

Broadcom ≫ Rabbitmq Server Version 3.5.6

Pivotal Software ≫ Rabbitmq Version 3.5.4

Pivotal Software ≫ Rabbitmq Version 3.5.5

Pivotal Software ≫ Rabbitmq Version 3.5.7

Pivotal Software ≫ Rabbitmq Version 3.6.0

Pivotal Software ≫ Rabbitmq Version 3.6.1

Pivotal Software ≫ Rabbitmq Version 3.6.2

Pivotal Software ≫ Rabbitmq Version 3.6.3

Pivotal Software ≫ Rabbitmq Version 3.6.4

Pivotal Software ≫ Rabbitmq Version 3.6.5

Pivotal Software ≫ Rabbitmq Version 1.5.0 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.1 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.2 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.3 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.4 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.5 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.6 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.7 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.8 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.9 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.10 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.11 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.12 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.13 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.14 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.15 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.17 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.5.18 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.0 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.1 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.2 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.3 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.4 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.5 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.6 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.7 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.8 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.9 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.6.10 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.7.0 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.7.2 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.7.3 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.7.4 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.7.5 SwPlatform pivotal_cloud_foundry

Pivotal Software ≫ Rabbitmq Version 1.7.6 SwPlatform pivotal_cloud_foundry

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.38%	0.685

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.debian.org/security/2017/dsa-3761

http://www.securityfocus.com/bid/95065

https://pivotal.io/security/cve-2016-9877

Vendor Advisory

Mitigation

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03880en_us

https://nvd.nist.gov/vuln/detail/CVE-2016-9877

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9877

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9877

EUVD