mvw — THWACK

Comments

That is possible, we haven’t applied 2017.3 Hotfix 4 yet.

in Return Of Bleichenbacher's Oracle Threat (ROBOT) Information Disclosure Comment by mvw February 2018
SolarWinds will most likely want to update RabbitMQ/Erlang to a version that fixes this vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2017-1000385 https://robotattack.org/ In the meantime, I found a workaround, which is to modify C:\ProgramData\Solarwinds\Orion\RabbitMQ\rabbitmq.conf and remove the following items…

in Return Of Bleichenbacher's Oracle Threat (ROBOT) Information Disclosure Comment by mvw February 2018