This vulnerability (CWE-295) arises from Spring Boot's RabbitMQ auto-configuration failing to verify the hostname in SSL certificates when connecting to RabbitMQ brokers. Affected versions include 3.5.0 to 3.5.13 and 4.0.0 to 4.0.5. The lack of hostname verification undermines the SSL/TLS trust model, potentially allowing attackers to intercept or manipulate communications. The vendor advisory indicates fixes are available in versions 3.5.14 and 4.0.6.

The improper certificate validation can allow an attacker with network access to perform man-in-the-middle attacks against RabbitMQ connections configured with SSL bundles, potentially leading to interception or modification of data in transit. The CVSS score of 5.0 reflects limited attack vector (adjacent network) and high attack complexity, with impacts on confidentiality, integrity, and availability rated as low to medium.

Upgrade affected Spring Boot versions to 3.5.14 or 4.0.6 or later, where hostname verification in RabbitMQ SSL connections is properly enforced. Since the vendor advisory specifies these fixed versions, applying these updates is the recommended remediation. No other mitigations are indicated by the vendor advisory.