puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter.
CVSS 2.0
Severity: LOW
Problem Type: CWE-200,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| voxpupuli | rabbitmq | 4.0.0 |
| voxpupuli | rabbitmq | 3.0.0 |
| voxpupuli | rabbitmq | 3.1.0 |