← CVE Intelligence

CVE-2025-50200

RabbitMQ Node can log Basic Auth header from an HTTP request PUBLISHED

Description (CNA)

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

Affected (CNA)

Vendor / productVersions
rabbitmq / rabbitmq-serveraffected <= 3.13.7

CWE

CWE-532

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.