CVE-2014-9494
EPSS 0.39%
Description
RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header.
How to fix CVE-2014-9494
To remediate CVE-2014-9494, upgrade the affected package to a fixed version below.
- Debian/rabbitmq-server—upgrade to 3.4.1-1 or later
Is CVE-2014-9494 being exploited?
Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 3.4.1-1