Security Breach RabbitMQ Nprinting

Philipp_Walter — Fri, 15 Nov 2024 22:46:59 GMT

Hi there,

the RabbitMQ Software Versions 3.8.X are vulnerable to DOS Attacks over the MQTT Protocol.

https://www.synopsys.com/blogs/software-security/cyrc-advisory-rabbitmq-emqx-vernemq/

Is there a Way to manually update RabbitMQ to Version 3.8.16 where they fix that problem? Or will be there a Nprinting Patch?

Greetings

Philipp

Re: Security Breach RabbitMQ Nprinting

Ruggero_Piccoli — Thu, 24 Jun 2021 10:18:40 GMT

Hi,

For this kind of request please open a support ticket that will be sent to the developers.

About the CVE-2021-22116 security breach of RabbitMQ please note that (from https://tanzu.vmware.com/security/cve-2021-22116) : "A malicious can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.". Qlik NPrinting has not the AMQP 1.0 plugin enabled. You can check the list of enabled plugins by opening the file c:\ProgramData\NPrinting\RabbitMQ\enabled_plugins in the Qlik NPrinting Server with a text editor.

Best Regards,
Ruggero

topic Security Breach RabbitMQ Nprinting in Qlik NPrinting

Security Breach RabbitMQ Nprinting

Re: Security Breach RabbitMQ Nprinting