6.7

CVE-2025-50200: broadcom rabbitmq_server

CVSS: 6.7v4.0MediumAnalyzed
AliasesSUSE-SU-2025:03234-1SUSE-SU-2025:3809-1UBUNTU-CVE-2025-50200
Published 19-06-2025Last modified 20-06-2025
Open JSON

Vulnerability summary

CVE-2025-50200 is a medium (CVSS 6.7) vulnerability in broadcom rabbitmq_server. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.7% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
37/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.7/10
010
Medium · v4.0 (CVE.org)
EPSS score
0.21%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Timeline

  1. 19-06-2025
    PublishedVulnerability first disclosed.
  2. 20-06-2025
    Last modifiedVulnerability information updated.

Description

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which show base64 encoded username:password. This is easy to decode and afterwards could be used to obtain control to the system depending on credentials. This issue has been patched in version 4.0.8.

CVSS metrics

6 scores · 4 sources · 2 versions

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

+0.01 pp

From 0.21% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Rabbitmq Server

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Suse4 products
  • rabbitmq-server313&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6< 3.13.1-150600.13.11.1
  • rabbitmq-server313&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7< 3.13.1-150600.13.11.1
  • rabbitmq-server&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6< 3.8.11-150300.3.22.2
  • rabbitmq-server&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7< 3.8.11-150300.3.22.2
Opensuse3 products
  • rabbitmq-server313&distro=openSUSE Leap 15.6< 3.13.1-150600.13.11.1
  • rabbitmq-server&distro=openSUSE Leap 15.6< 3.8.11-150300.3.22.2
  • rabbitmq-server&distro=openSUSE Tumbleweed< 3.13.7-5.1
Broadcom1 product
Debian1 product
  • rabbitmq-server< 4.0.5-6+deb13u2 | < 4.0.5-9
Rabbitmq1 product
Ubuntu1 product
  • rabbitmq-server< 4.0.5-2ubuntu2.1

6 vendors · 11 products

References

11 links
Show all 11 references