Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi there,
the RabbitMQ Software Versions 3.8.X are vulnerable to DOS Attacks over the MQTT Protocol.
https://www.synopsys.com/blogs/software-security/cyrc-advisory-rabbitmq-emqx-vernemq/
Is there a Way to manually update RabbitMQ to Version 3.8.16 where they fix that problem? Or will be there a Nprinting Patch?
Greetings
Philipp
Hi,
For this kind of request please open a support ticket that will be sent to the developers.
About the CVE-2021-22116 security breach of RabbitMQ please note that (from https://tanzu.vmware.com/security/cve-2021-22116) : "A malicious can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.". Qlik NPrinting has not the AMQP 1.0 plugin enabled. You can check the list of enabled plugins by opening the file c:\ProgramData\NPrinting\RabbitMQ\enabled_plugins in the Qlik NPrinting Server with a text editor.
Best Regards,
Ruggero
Hi,
For this kind of request please open a support ticket that will be sent to the developers.
About the CVE-2021-22116 security breach of RabbitMQ please note that (from https://tanzu.vmware.com/security/cve-2021-22116) : "A malicious can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.". Qlik NPrinting has not the AMQP 1.0 plugin enabled. You can check the list of enabled plugins by opening the file c:\ProgramData\NPrinting\RabbitMQ\enabled_plugins in the Qlik NPrinting Server with a text editor.
Best Regards,
Ruggero