CVE-2021-22117

7.8 highEPSS 0.6%

High (7.8) in broadcom rabbitmq server. EPSS 0.6% chance of exploitation in the next 30 days.

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWEs: CWE-732, CWE-94
Published: 2021-05-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

broadcom:rabbitmq_server

References

https://tanzu.vmware.com/security/cve-2021-22117
https://tanzu.vmware.com/security/cve-2021-22117

Check your stack JSON