CVE-2018-14620

CVE-2018-14620 describes a critical vulnerability in the OpenStack RabbitMQ container image, specifically affecting Red Hat OpenStack versions 12, 13, and 14. The flaw stems from the insecure retrieval of the rabbitmq_clusterer component via HTTP during the image build process, enabling a potential attacker to inject malicious code into the resulting container image. With a CVSS score of 9.8 (CRITICAL), this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. No user interaction is required for a successful exploit. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention despite its high severity.