A cross site scripting vulnerability was found in the management UI of RabbitMQ.
Created rabbitmq-server tracking bugs for this issue:
Affects: epel-all [bug 1448338]
Affects: fedora-24 [bug 1448339]
This issue affects rabbitmq-server plugins as shipped with:
* Red Hat Storage Console 2
* Red Hat Enterprise Linux OpenStack Platform 5,6,7
* Red Hat OpenStack Platform 8,9,10,11
Although RabbitMQ plugins are shipped in these products, no plugins are enabled or used by default.
To verify your environment's plugin usage, run:
# rabbitmq-plugins list
A future update may address this issue. Red Hat Product Security has rated this issue as having Moderate security impact. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.