Unrated severityNVD Advisory· Published Jun 16, 2023· Updated Mar 30, 2025
CVE-2023-35789
CVE-2023-35789
Description
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21- osv-coords20 versionspkg:apk/chainguard/rabbitmq-cpkg:apk/chainguard/rabbitmq-c-devpkg:apk/wolfi/rabbitmq-cpkg:apk/wolfi/rabbitmq-c-devpkg:bitnami/rabbitmq-cpkg:rpm/almalinux/librabbitmqpkg:rpm/almalinux/librabbitmq-develpkg:rpm/almalinux/librabbitmq-toolspkg:rpm/opensuse/rabbitmq-c&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/rabbitmq-c&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/rabbitmq-c&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/rabbitmq-c&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/rabbitmq-c&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/rabbitmq-c&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4pkg:rpm/suse/rabbitmq-c&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5pkg:rpm/suse/rabbitmq-c&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/rabbitmq-c&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/rabbitmq-c&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/rabbitmq-c&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/rabbitmq-c&distro=SUSE%20Manager%20Server%204.2
< 0.15.0-r0+ 19 more
- (no CPE)range: < 0.15.0-r0
- (no CPE)range: < 0.15.0-r0
- (no CPE)range: < 0.15.0-r0
- (no CPE)range: < 0.15.0-r0
- (no CPE)range: <= 0.13.0
- (no CPE)range: < 0.11.0-7.el9
- (no CPE)range: < 0.11.0-7.el9
- (no CPE)range: < 0.11.0-7.el9
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
- (no CPE)range: < 0.10.0-150300.5.6.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.