CVE-2021-35227

Insecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARM

State: Published
Severity: 4.7 Medium
Published: Oct 21, 2021
Updated: Sep 16, 2024
Reserved: Jun 22, 2021

Description

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N	SolarWinds

Weaknesses

CWE-79

Affected Products

Product	Versions
Access Rights ManagerSolarWinds	2020.2.6 and previous versions through 2021.4Affected

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35227
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2021-4_release_notes.htm

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.