{"id":"BIT-rabbitmq-c-2023-35789","details":"An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.","aliases":["CVE-2023-35789"],"modified":"2026-09-08T08:47:47.696839893Z","published":"2026-03-20T09:18:07.029Z","database_specific":{"cpes":["cpe:2.3:a:rabbitmq-c_project:rabbitmq-c:*:*:*:*:*:*:*:*"],"severity":"Medium"},"references":[{"type":"REPORT","url":"https://github.com/alanxz/rabbitmq-c/issues/575"},{"type":"FIX","url":"https://github.com/alanxz/rabbitmq-c/pull/781"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00022.html"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35789"}],"affected":[{"package":{"name":"rabbitmq-c","ecosystem":"Bitnami","purl":"pkg:bitnami/rabbitmq-c"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.13.0"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/rabbitmq-c/BIT-rabbitmq-c-2023-35789.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}],"schema_version":"1.9.0"}