CVE-2023-4065 in AMQ Broker

Résumé

par MITRE • 27/09/2023

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 01/08/2023
• Divulgation: 27/09/2023
• Modérer: accepté
• Entrée: VDB-237864
• CPE: prêt
• CWE: CWE-532 (confirmé)
• CVSS: 3.3 (VulDB)
• EPSS: 0.00231
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-4065
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-4065
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-4065/