Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:pivotal_rabbitmq_3.x_before_3.5.8_and_3.6.x_before_3.6.6;_rabbitmq_for_pcf_1.5.x_before_1.5.20,_1.6.x_before_1.6.12_and_1.7.x_before_1.7.7:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductPivotal Rabbitmq 3.X Before 3.5.8 And 3.6.X Before 3.6.6; Rabbitmq For Pcf 1.5.X Before 1.5.20, 1.6.X Before 1.6.12 And 1.7.X Before 1.7.7 (94a2fde6-f1fc-5a1c-b3a5-c00370db0f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9877 vulnerable 2026-06-08 05:08:24.813944 Details available
An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.
Published: 2016-12-29T09:02:00.000Z
Updated: 2024-08-06T03:07:30.822Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.