Back to Database
Status published
Medium
CVE-2020-5419
RabbitMQ arbitrary code execution using local binary planting
Vulnerability Description
RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-5419
Credits & Attribution
No credits recorded in the NVD database.
More from VMware Tanzu
View All →CVE-2020-5426
Scheduler for TAS can transmit privileged UAA token in plaintext
High
8.6
CVE-2020-5425
User Impersonation possible in Tanzu SSO
High
7.5
CVE-2020-5415
Concourse's GitLab auth allows impersonation
Critical
10
CVE-2020-5414
App Autoscaler logs credentials
Medium
5.7
CVE-2020-5396
JMX Insecure Default Configuration in GemFire
High
8.8
Affected Vendor
VMware Tanzu
View all reports →Affected Software
RabbitMQ
Vulnerable Versions:
3.7, 3.8
Timeline
Official Publish:
August 31st, 2020
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H