description: RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.
problem types: CWE-94: Improper Control of Generation of Code
affected:
{
product: RabbitMQ
vendor: n/a
versions:
status: affected, version: RabbitMQ Windows installers prior to version 3.8.16
}