CVE-2020-5419

Published: Aug 31, 2020Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.

Affected (2)

Products: Broadcom: Rabbitmq Server · Pivotal Software: Rabbitmq

1 product

Rabbitmq Server

Pivotal Software

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Broadcom Rabbitmq Server	From 3.8.0 to 3.8.7
Pivotal Software Rabbitmq	Before 3.7.28

Related CWEs

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://tanzu.vmware.com/security/cve-2020-5419

Source: security@pivotal.io

Vendor Advisory

https://tanzu.vmware.com/security/cve-2020-5419

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.