Active debug code present in the ARN resolver of Amazon MQ RabbitMQ-AWS presents a security risk that requires immediate attention.

This vulnerability is caused by the presence of active debug code within the ARN resolver component of the software. Such debug functionality often exposes internal system information or provides unintended execution paths that can be leveraged by an attacker.

The presence of debug code in production environments can lead to information disclosure or unauthorized control over system resources. With a CVSS score of 7.7, this vulnerability is classified as high, as it may allow attackers to gain deeper insights into the underlying architecture or bypass security controls intended for production use.

Immediate Action: Update the affected RabbitMQ-AWS components to the latest version provided by the vendor to ensure all debug code is removed.

Proactive Monitoring: Review application logs for unexpected behavior or interactions with the ARN resolver that deviate from standard operational patterns.

Compensating Controls: Utilize environment-level restrictions to ensure that only authorized services can interact with the affected resolver component, minimizing the attack surface.

Public Exploit Available: false

Organizations utilizing Amazon MQ with RabbitMQ-AWS must verify their current version and update to a clean build immediately. Removing debug-level functionality is a standard security requirement to prevent the accidental exposure of sensitive system logic to malicious actors.