Security readout for executives and security teams
Plain-English summary
CVE-2017-4967 is a cross-site scripting issue in several RabbitMQ management UI forms. If an organization still runs affected RabbitMQ or RabbitMQ for PCF versions, users of the management interface could be exposed to malicious script execution through the UI. The supplied sources do not report active exploitation.
Executive priority
Prioritize remediation for internet-accessible or broadly reachable management interfaces. For internal-only legacy systems, schedule upgrade through normal vulnerability management, but avoid leaving unsupported RabbitMQ branches in service.
Technical view
The CVE describes XSS in RabbitMQ management UI forms affecting RabbitMQ 3.4.x, 3.5.x, and 3.6.x before 3.6.9, plus RabbitMQ for PCF 1.5.x, 1.6.x before 1.6.18, and 1.7.x before 1.7.15. No CVSS vector, CWE, exploit details, or affected form names are provided in the bundle.
Likely exposure
Exposure is most likely in legacy RabbitMQ deployments that still enable the management UI on affected versions, especially systems not updated since 2017 or old PCF environments.
Exploitation context
The source bundle supports XSS risk in management UI forms only. It does not establish unauthenticated exploitation, public exploit availability, or known active exploitation. The CVE is not marked in KEV.
Researcher notes
Evidence is limited to the CVE description and referenced advisories. The bundle does not include CVSS, CWE mapping, form-level details, authentication context, or proof-of-concept information. Treat validation as version and exposure confirmation rather than exploit reproduction.
Mitigation direction
- Upgrade RabbitMQ 3.6.x deployments to 3.6.9 or later.
- Move RabbitMQ 3.4.x and 3.5.x systems to a supported fixed release.
- Upgrade RabbitMQ for PCF to 1.6.18, 1.7.15, or later as applicable.
- Apply distribution security updates, including Debian LTS guidance where relevant.
- Restrict management UI access to trusted administrative networks.
Validation and detection
- Inventory RabbitMQ and RabbitMQ for PCF versions across all environments.
- Confirm whether the RabbitMQ management UI is enabled and reachable.
- Check for RabbitMQ 3.4.x, 3.5.x, or 3.6.x before 3.6.9.
- Check PCF tile versions against 1.6.18 and 1.7.15 thresholds.
- Review vendor or distribution advisory status for applied fixes.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-4967 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://pivotal.io/security/cve-2017-4965CVE reference · x_refsource_CONFIRM
- [debian-lts-announce] 20210719 [SECURITY] [DLA 2710-1] rabbitmq-server security updateCVE reference · mailing-list, x_refsource_MLIST
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.