RabbitMQ in the Media

Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland - SWN #598

Podcast Segment: Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland – SWN #598. Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland, and More on the Security Weekly News.

RabbitMQ fixes flaw that allowed broker takeover via OAuth secret disclosure

An additional flaw would allow an authenticated attacker with zero permissions to view cross-tenant metadata.

RabbitMQ Vulnerability Exposes OAuth Secrets to Attackers

Hackers Can Exploit RabbitMQ OAuth Flaw to Access Every Message, Queue, and User

Security researchers have disclosed two access-control vulnerabilities in RabbitMQ, the open-source message broker used in an estimated 8% of all containers running today, that could allow attackers to seize full administrative control of a broker or silently map out sensitive queue data across…