Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat:openstack-rabbitmq-container:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat (a3686528-5679-55c9-b393-abe45df26bd2)
ProductOpenstack Rabbitmq Container (da0eb2cf-3ea6-5132-a00a-ed41016ce87e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14620 vulnerable 2026-06-08 05:10:53.115169 Details available
MEDIUM (4.7)
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.
Published: 2018-09-10T19:00:00.000Z
Updated: 2024-08-05T09:29:51.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.