VDB

CVE-2021-22117

CVE-2021-22117 PUBLISHED

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

EPSS 0.10% · 27.7th percentile

Risk Scores

EPSS Score
0.10%
27.7th percentile

Affected Products

VendorProductVersions
Bitnamirabbitmq3.8.0
Bitnamirabbitmq3.8.0

Timeline

  • CVE Published
  • May 19, 2021 EPSS Score
  • May 26, 2021 EPSS Score
  • Jul 1, 2021 PoC Published
  • Jul 21, 2021 EPSS Score
  • Nov 21, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Jan 22, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 25, 2022 EPSS Score
  • Jul 26, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›