Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This means that in case of certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable data could appear in the node log. Patched versions correctly use a cluster-wide secret for that purpose. This issue has been addressed and Patched versions: `3.10.2`, `3.9.18`, `3.8.32` are available. Users unable to upgrade should disable the Shovel and Federation plugins.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 RabbitMQ Predictable Credential Obfuscation Seed Vulnerability (#CVE-2022-31008) – Moderate Severity -DC-Jun2026-741 https://dailycve.com/rabbitmq-predictable-credential-obfuscation-seed-vulnerability-cve-2022-31008-moderate-severity-dc-jun2026-741/
Post summary
The link lists a RabbitMQ vulnerability (CVE-2022-31008) rated Moderate Severity, but provides no further details on exploitation, PoC, patch, or mitigation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | broadcom | rabbitmq_server | - | - | - |
| App | vmware | rabbitmq | - | - | - |