[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foV-gwey3mb_tBrOE-J71nmVtE3FSCbVW5Io8kwya3yg":3,"g5a-risk:CVE-2018-1279":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":15,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":57,"references":58,"referencesCount":57,"weaknesses":65,"weaknessesCount":57,"isActivelyExploited":74,"cisaInfo":15,"otxData":15,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":109,"notableEvents":110},"CVE-2018-1279","What is CVE-2018-1279?","Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant cluster. A remote attacker who can gain information about the network topology can guess this cookie and, if they have access to the right ports on any server in the MQ cluster can use this cookie to gain full control over the entire cluster.","Pivotal RabbitMQ for PCF, all versions, uses a deterministically generated cookie that is shared between all machines when configured in a multi-tenant clust...","2018-12-10T19:29:25.127","2019-10-09T23:38:18.803",6.5,"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":40,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":38,"ImpactScore":39},"security_alert@emc.com","Secondary",{"Version":21,"VectorString":34,"AttackVector":35,"AttackComplexity":26,"PrivilegesRequired":23,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","CHANGED",8.5,1.8,6,[41],{"Source":18,"Type":19,"CVSSData":42,"BaseSeverity":23,"ExploitabilityScore":12,"ImpactScore":47,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":43,"VectorString":44,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":45,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":46,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",3.3,2.9,0.0183,[48,48,48,48,48,48,48],"Medium",[52],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"pivotal_software","rabbitmq","*","cpe:2.3:a:pivotal_software:rabbitmq:*:*:*:*:*:pivotal_cloud_foundry:*:*",1,[59],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fpivotal.io\u002Fsecurity\u002Fcve-2018-1279","Pivotal",[63,64],"Mitigation","Vendor Advisory",[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-330","Use of Insufficiently Random Values","The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.","When product generates predictable values in a context requiring unpredictability, it may be possible for an attacker to guess the next value that will be generated, and use this guess to impersonate another user or access sensitive information.","Stable","Class","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2018-1279? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1279, a medium severity cyber security vulnerability from 2018. Pivotal RabbitMQ for PCF, all versions, uses a determinist...","CVE-2018-1279, CVE-2018-1279 vulnerability, CVE-2018-1279 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, pivotal_software security, rabbitmq vulnerability","\u002Fwhat-is\u002Fcve-2018-1279",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1279","Cybersecurity","CVE-2018-1279, CVE-2018-1279 vulnerability, CVE-2018-1279 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":15,"Negate":15,"Nodes":103},[104],{"Operator":105,"Negate":15,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":108,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8ECA11BE-4AD5-41B4-9828-037E3D36F94E",[],[],{"lastModified":11,"cacheTime":112,"version":43},1792358831212,{"score":114,"band":50,"action":115,"scoredAt":116},48,"Plan remediation","2026-10-16T06:45:14.837751+00:00"]