Vulnerability-Lookup

CNVD-2016-13101

Vulnerability from cnvd - Published: 2016-12-27

Title

Pivotal Software RabbitMQ和RabbitMQ for PCF安全绕过漏洞

Description

Pivotal Software RabbitMQ和RabbitMQ for PCF都是美国Pivotal Software公司的产品。前者是一套实现了高级消息队列协议（AMQP）的开源消息代理软件，后者是一款开源的用于支持基于全局数据传送和高容量的数据监测的消息服务器。 Pivotal Software RabbitMQ和RabbitMQ for PCF中存在身份验证绕过漏洞。攻击者可利用该漏洞绕过身份验证机制和获取未授权的访问权限。

Severity

中

Patch Name

Pivotal Software RabbitMQ和RabbitMQ for PCF安全绕过漏洞的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://pivotal.io/security/cve-2016-9877

Reference

http://www.securityfocus.com/bid/95065

Impacted products

Name
['Pivotal Software RabbitMQ 3.，<3.5.8', 'Pivotal Software RabbitMQ 3.6.，<3.6.6', 'Pivotal Software RabbitMQ for PCF 1.5.，<1.5.20', 'Pivotal Software RabbitMQ for PCF 1.6.，<1.6.12', 'Pivotal Software RabbitMQ for PCF 1.7.*，<1.7.7']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "95065"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-9877"
    }
  },
  "description": "Pivotal Software RabbitMQ\u548cRabbitMQ for PCF\u90fd\u662f\u7f8e\u56fdPivotal Software\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u5b9e\u73b0\u4e86\u9ad8\u7ea7\u6d88\u606f\u961f\u5217\u534f\u8bae\uff08AMQP\uff09\u7684\u5f00\u6e90\u6d88\u606f\u4ee3\u7406\u8f6f\u4ef6\uff0c\u540e\u8005\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u7528\u4e8e\u652f\u6301\u57fa\u4e8e\u5168\u5c40\u6570\u636e\u4f20\u9001\u548c\u9ad8\u5bb9\u91cf\u7684\u6570\u636e\u76d1\u6d4b\u7684\u6d88\u606f\u670d\u52a1\u5668\u3002\r\n\r\nPivotal Software RabbitMQ\u548cRabbitMQ for PCF\u4e2d\u5b58\u5728\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236\u548c\u83b7\u53d6\u672a\u6388\u6743\u7684\u8bbf\u95ee\u6743\u9650\u3002",
  "discovererName": "Pivotal Software",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://pivotal.io/security/cve-2016-9877",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-13101",
  "openTime": "2016-12-27",
  "patchDescription": "Pivotal Software RabbitMQ\u548cRabbitMQ for PCF\u90fd\u662f\u7f8e\u56fdPivotal Software\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u5b9e\u73b0\u4e86\u9ad8\u7ea7\u6d88\u606f\u961f\u5217\u534f\u8bae\uff08AMQP\uff09\u7684\u5f00\u6e90\u6d88\u606f\u4ee3\u7406\u8f6f\u4ef6\uff0c\u540e\u8005\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u7528\u4e8e\u652f\u6301\u57fa\u4e8e\u5168\u5c40\u6570\u636e\u4f20\u9001\u548c\u9ad8\u5bb9\u91cf\u7684\u6570\u636e\u76d1\u6d4b\u7684\u6d88\u606f\u670d\u52a1\u5668\u3002\r\n\r\nPivotal Software RabbitMQ\u548cRabbitMQ for PCF\u4e2d\u5b58\u5728\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236\u548c\u83b7\u53d6\u672a\u6388\u6743\u7684\u8bbf\u95ee\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Pivotal Software RabbitMQ\u548cRabbitMQ for PCF\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Pivotal Software RabbitMQ 3.*\uff0c\u003c3.5.8",
      "Pivotal Software RabbitMQ  3.6.*\uff0c\u003c3.6.6",
      "Pivotal Software RabbitMQ for PCF 1.5.*\uff0c\u003c1.5.20",
      "Pivotal Software RabbitMQ for PCF  1.6.*\uff0c\u003c1.6.12",
      "Pivotal Software RabbitMQ for PCF  1.7.*\uff0c\u003c1.7.7"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/95065",
  "serverity": "\u4e2d",
  "submitTime": "2016-12-23",
  "title": "Pivotal Software RabbitMQ\u548cRabbitMQ for PCF\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e"
}

CVE-2016-9877 (GCVE-0-2016-9877)

Vulnerability from cvelistv5 – Published: 2016-12-29 09:02 – Updated: 2024-08-06 03:07

Summary

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.

Severity

No CVSS data available.

CWE

RabbitMQ authentication vulnerability

Assigner

dell mitre root

References

4 references

URL	Tags
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/95065	vdb-entryx_refsource_BID
https://pivotal.io/security/cve-2016-9877	x_refsource_CONFIRM
http://www.debian.org/security/2017/dsa-3761	vendor-advisoryx_refsource_DEBIAN

Impacted products

1 product

Vendor	Product	Version
n/a	Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7	Affected: Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7

Date Public

2016-12-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:30.822Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03880en_us"
          },
          {
            "name": "95065",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95065"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://pivotal.io/security/cve-2016-9877"
          },
          {
            "name": "DSA-3761",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3761"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7"
            }
          ]
        }
      ],
      "datePublic": "2016-12-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "RabbitMQ authentication vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-21T09:57:01.000Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03880en_us"
        },
        {
          "name": "95065",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95065"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://pivotal.io/security/cve-2016-9877"
        },
        {
          "name": "DSA-3761",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3761"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security_alert@emc.com",
          "ID": "CVE-2016-9877",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "RabbitMQ authentication vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03880en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03880en_us"
            },
            {
              "name": "95065",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95065"
            },
            {
              "name": "https://pivotal.io/security/cve-2016-9877",
              "refsource": "CONFIRM",
              "url": "https://pivotal.io/security/cve-2016-9877"
            },
            {
              "name": "DSA-3761",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3761"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2016-9877",
    "datePublished": "2016-12-29T09:02:00.000Z",
    "dateReserved": "2016-12-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T03:07:30.822Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2016-13101

CVE-2016-9877 (GCVE-0-2016-9877)

Tags

Sightings

Nomenclature

Related by attack behaviour