VDB

BIT-rabbitmq-c-2023-35789

BIT-rabbitmq-c-2023-35789 PUBLISHED CVSS 5.5 MEDIUM

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Bitnamirabbitmq-c0, 0, 0

Timeline

  • Mar 20, 2026 CVE Published
  • Mar 20, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›