Oval Definition:oval:com.ubuntu.xenial:def:20149649000
Revision Date:2015-01-27Version:1
Title:CVE-2014-9649 on Ubuntu 16.04 LTS (xenial) - negligible.
Description:Cross-site scripting (XSS) vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the path info to api/, which is not properly handled in an error message.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-9649
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND NOT While related to the CVE in some way, the 'rabbitmq-server' package in xenial is not affected (note: '3.4.2-2').
    • BACK