PT-2026-75993

Published

2026-06-10

·

Updated

2026-06-10

Description by

CVSS 3.1
4.4
Medium
MetricsAV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to internal simple counter.
Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-330: Use of Insufficiently Random Values
Related identifiers
GHSA-P5F7-RJHP-PXVC
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com