CVE-2017-4965 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-4965 Interim 1 30 2025-11-05T04:09:12Z current 2021-05-30T13:51:24Z 2025-11-05T04:09:12Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-4965 An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2020-July/015563.html E-Mail link for SUSE-RU-2020:2072-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 HPE Helion OpenStack Cloud 8 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 ansible-2.2.3.0-12.2 crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5 crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5 crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4 crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4 erlang-rabbitmq-client grafana-4.6.5-1.14.1 keepalived-2.0.19-1.8.1 kibana-4.6.3-5.1 memcached-1.5.17-3.6.1 monasca-installer-20180608_12.47-12.1 openstack-dashboard-theme-SUSE-2016.2-5.12.4 openstack-manila-3.0.1~dev30-4.12.2 openstack-manila-api-3.0.1~dev30-4.12.2 openstack-manila-data-3.0.1~dev30-4.12.2 openstack-manila-doc-3.0.1~dev30-4.12.3 openstack-manila-scheduler-3.0.1~dev30-4.12.2 openstack-manila-share-3.0.1~dev30-4.12.2 openstack-neutron-fwaas-9.0.2~dev5-4.9.3 openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4 openstack-nova-14.0.11~dev13-4.40.2 openstack-nova-api-14.0.11~dev13-4.40.2 openstack-nova-cells-14.0.11~dev13-4.40.2 openstack-nova-cert-14.0.11~dev13-4.40.2 openstack-nova-compute-14.0.11~dev13-4.40.2 openstack-nova-conductor-14.0.11~dev13-4.40.2 openstack-nova-console-14.0.11~dev13-4.40.2 openstack-nova-consoleauth-14.0.11~dev13-4.40.2 openstack-nova-doc-14.0.11~dev13-4.40.2 openstack-nova-novncproxy-14.0.11~dev13-4.40.2 openstack-nova-placement-api-14.0.11~dev13-4.40.2 openstack-nova-scheduler-14.0.11~dev13-4.40.2 openstack-nova-serialproxy-14.0.11~dev13-4.40.2 openstack-nova-vncproxy-14.0.11~dev13-4.40.2 openstack-tempest-12.2.1~a0~dev177-4.9.1 openstack-tempest-test-12.2.1~a0~dev177-4.9.1 python-Django-1.8.19-3.23.1 python-Pillow-2.8.1-4.12.1 python-manila-3.0.1~dev30-4.12.2 python-neutron-fwaas-9.0.2~dev5-4.9.3 python-nova-14.0.11~dev13-4.40.2 python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1 python-psutil-1.2.1-21.1 python-py-1.8.1-11.12.1 python-pysaml2-4.0.2-3.17.1 python-tempest-12.2.1~a0~dev177-4.9.1 python-waitress-1.4.3-3.3.1 rabbitmq-server rabbitmq-server-3.4.4-3.16.1 rabbitmq-server-plugins rabbitmq-server-plugins-3.4.4-3.16.1 release-notes-suse-openstack-cloud-7.20180803-3.18.3 ruby2.1-rubygem-activeresource-4.0.0-3.3.1 ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1 ruby2.1-rubygem-json-1_7-1.7.7-3.3.1 ruby2.1-rubygem-puma-2.16.0-4.6.1 zookeeper-server-3.4.10-6.1 ansible-2.2.3.0-12.2 as a component of SUSE OpenStack Cloud 7 crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5 as a component of SUSE OpenStack Cloud 7 crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5 as a component of SUSE OpenStack Cloud 7 crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4 as a component of SUSE OpenStack Cloud 7 crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4 as a component of SUSE OpenStack Cloud 7 grafana-4.6.5-1.14.1 as a component of SUSE OpenStack Cloud 7 keepalived-2.0.19-1.8.1 as a component of SUSE OpenStack Cloud 7 kibana-4.6.3-5.1 as a component of SUSE OpenStack Cloud 7 memcached-1.5.17-3.6.1 as a component of SUSE OpenStack Cloud 7 monasca-installer-20180608_12.47-12.1 as a component of SUSE OpenStack Cloud 7 openstack-dashboard-theme-SUSE-2016.2-5.12.4 as a component of SUSE OpenStack Cloud 7 openstack-manila-3.0.1~dev30-4.12.2 as a component of SUSE OpenStack Cloud 7 openstack-manila-api-3.0.1~dev30-4.12.2 as a component of SUSE OpenStack Cloud 7 openstack-manila-data-3.0.1~dev30-4.12.2 as a component of SUSE OpenStack Cloud 7 openstack-manila-doc-3.0.1~dev30-4.12.3 as a component of SUSE OpenStack Cloud 7 openstack-manila-scheduler-3.0.1~dev30-4.12.2 as a component of SUSE OpenStack Cloud 7 openstack-manila-share-3.0.1~dev30-4.12.2 as a component of SUSE OpenStack Cloud 7 openstack-neutron-fwaas-9.0.2~dev5-4.9.3 as a component of SUSE OpenStack Cloud 7 openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4 as a component of SUSE OpenStack Cloud 7 openstack-nova-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-api-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-cells-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-cert-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-compute-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-conductor-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-console-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-consoleauth-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-doc-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-novncproxy-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-placement-api-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-scheduler-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-serialproxy-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-nova-vncproxy-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 openstack-tempest-12.2.1~a0~dev177-4.9.1 as a component of SUSE OpenStack Cloud 7 openstack-tempest-test-12.2.1~a0~dev177-4.9.1 as a component of SUSE OpenStack Cloud 7 python-Django-1.8.19-3.23.1 as a component of SUSE OpenStack Cloud 7 python-Pillow-2.8.1-4.12.1 as a component of SUSE OpenStack Cloud 7 python-manila-3.0.1~dev30-4.12.2 as a component of SUSE OpenStack Cloud 7 python-neutron-fwaas-9.0.2~dev5-4.9.3 as a component of SUSE OpenStack Cloud 7 python-nova-14.0.11~dev13-4.40.2 as a component of SUSE OpenStack Cloud 7 python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1 as a component of SUSE OpenStack Cloud 7 python-psutil-1.2.1-21.1 as a component of SUSE OpenStack Cloud 7 python-py-1.8.1-11.12.1 as a component of SUSE OpenStack Cloud 7 python-pysaml2-4.0.2-3.17.1 as a component of SUSE OpenStack Cloud 7 python-tempest-12.2.1~a0~dev177-4.9.1 as a component of SUSE OpenStack Cloud 7 python-waitress-1.4.3-3.3.1 as a component of SUSE OpenStack Cloud 7 rabbitmq-server-3.4.4-3.16.1 as a component of SUSE OpenStack Cloud 7 rabbitmq-server-plugins-3.4.4-3.16.1 as a component of SUSE OpenStack Cloud 7 release-notes-suse-openstack-cloud-7.20180803-3.18.3 as a component of SUSE OpenStack Cloud 7 ruby2.1-rubygem-activeresource-4.0.0-3.3.1 as a component of SUSE OpenStack Cloud 7 ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1 as a component of SUSE OpenStack Cloud 7 ruby2.1-rubygem-json-1_7-1.7.7-3.3.1 as a component of SUSE OpenStack Cloud 7 ruby2.1-rubygem-puma-2.16.0-4.6.1 as a component of SUSE OpenStack Cloud 7 zookeeper-server-3.4.10-6.1 as a component of SUSE OpenStack Cloud 7 rabbitmq-server as a component of HPE Helion OpenStack 8 rabbitmq-server-plugins as a component of HPE Helion OpenStack 8 rabbitmq-server as a component of HPE Helion OpenStack Cloud 8 erlang-rabbitmq-client as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server-plugins as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server as a component of SUSE OpenStack Cloud 8 rabbitmq-server-plugins as a component of SUSE OpenStack Cloud 8 rabbitmq-server as a component of SUSE OpenStack Cloud 9 rabbitmq-server-plugins as a component of SUSE OpenStack Cloud 9 rabbitmq-server as a component of SUSE OpenStack Cloud Crowbar 8 rabbitmq-server-plugins as a component of SUSE OpenStack Cloud Crowbar 8 rabbitmq-server as a component of SUSE OpenStack Cloud Crowbar 9 rabbitmq-server-plugins as a component of SUSE OpenStack Cloud Crowbar 9 An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks. CVE-2017-4965 SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2 SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5 SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5 SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4 SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4 SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1 SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1 SUSE OpenStack Cloud 7:kibana-4.6.3-5.1 SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1 SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1 SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4 SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2 SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2 SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2 SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3 SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2 SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2 SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3 SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4 SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1 SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1 SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1 SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1 SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2 SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3 SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2 SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1 SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1 SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1 SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1 SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1 SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1 SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1 SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1 SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3 SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1 SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1 SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1 HPE Helion OpenStack 8:rabbitmq-server HPE Helion OpenStack 8:rabbitmq-server-plugins HPE Helion OpenStack Cloud 8:rabbitmq-server SUSE Linux Enterprise Module for Server Applications 15 SP2:erlang-rabbitmq-client SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server-plugins SUSE OpenStack Cloud 8:rabbitmq-server SUSE OpenStack Cloud 8:rabbitmq-server-plugins SUSE OpenStack Cloud 9:rabbitmq-server SUSE OpenStack Cloud 9:rabbitmq-server-plugins SUSE OpenStack Cloud Crowbar 8:rabbitmq-server SUSE OpenStack Cloud Crowbar 8:rabbitmq-server-plugins SUSE OpenStack Cloud Crowbar 9:rabbitmq-server SUSE OpenStack Cloud Crowbar 9:rabbitmq-server-plugins low 3.6 AV:N/AC:H/Au:S/C:P/I:P/A:N 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N