CVE-2020-5419

MEDIUM

RabbitMQ <3.8.7 - Local Windows Code Execution via Binary Planting

Title source: manual
STIX 2.1

Description

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution. An attacker with write privileges to the RabbitMQ installation directory and local access on Windows could carry out a local binary hijacking (planting) attack and execute arbitrary code.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://tanzu.vmware.com/security/cve-2020-5419

Scores

CVSS v3 6.7
EPSS 0.0007
EPSS Percentile 21.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-427
Status published
Products (2)
broadcom/rabbitmq_server 3.8.0 - 3.8.7
pivotal_software/rabbitmq < 3.7.28
Published Aug 31, 2020
Tracked Since Feb 18, 2026