Skip to main content

Ubuntu EUVD-2025-18689

| CVE-2025-50200 MEDIUM
Insertion of Sensitive Information into Log File (CWE-532)
2025-06-19 security-advisories@github.com
Information Disclosure Ubuntu Debian Rabbitmq Server Red Hat Suse
5.5
CVSS 3.1 · GitHub Advisory
Share

Severity by source

GitHub Advisory PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Ubuntu
MEDIUM
qualitative
SUSE
MEDIUM
qualitative
Red Hat
4.4 MEDIUM
qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

5
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
EUVD ID Assigned
Mar 15, 2026 - 00:08 euvd
EUVD-2025-18689
Analysis Generated
Mar 15, 2026 - 00:08 vuln.today
PoC Detected
Aug 06, 2025 - 18:28 vuln.today
Public exploit code
CVE Published
Jun 19, 2025 - 17:15 nvd
MEDIUM 5.5

DescriptionGitHub Advisory

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

Analysis

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Insertion of Sensitive Information into Log File (CWE-532).

RemediationAI

Implement proper access controls. Sanitize error messages in production. Review logging practices to avoid capturing sensitive data.

Vendor StatusVendor

Ubuntu

Priority: Medium
rabbitmq-server
Release Status Version
oracular ignored end of life, was needs-triage
bionic not-affected -
focal not-affected -
jammy not-affected 3.9.27-0ubuntu0.2
noble not-affected 3.12.1-1ubuntu1.2
upstream released 4.0.5-9,4.0.8
xenial not-affected -
plucky released 4.0.5-2ubuntu2.1
USN-7763-1

Debian

Bug #1108075
rabbitmq-server
Release Status Fixed Version Urgency
bullseye (security), bullseye fixed 3.8.9-3+deb11u1 -
bookworm, bookworm (security) fixed 3.10.8-1.1+deb12u1 -
trixie fixed 4.0.5-6+deb13u2 -
forky, sid fixed 4.0.5-13 -
bullseye not-affected - -
bookworm not-affected - -
(unstable) fixed 4.0.5-9 -

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7 Fixed
openSUSE Leap 15.6 Fixed
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

EUVD-2025-18689 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy