UpHeron
All vulnerabilities

Servers and applications

CVE-2017-4966

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve…

Severity
High 7.8
Published
13 Jun 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.4% in the next 30 daysHigher than 31% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
RabbitMQServers and applications · cpe:a:broadcom:rabbitmq_server
  • Version 3.6.7
  • Version 3.5.6
  • Version 3.5.3
  • Version 3.5.2
All 11 release lines
  • Version 3.4.0
  • Version 3.4.1
  • Version 3.4.2
  • Version 3.4.3
  • Version 3.4.4
  • Version 3.5.0
  • Version 3.5.1
  • Version 3.5.2
  • Version 3.5.3
  • Version 3.5.6
  • Version 3.6.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-4966
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-4966