Read the docs
Red Hat Security Advisory

RHSA-2023:4720

AMQ Broker 7.11.1.OPR.2.GA Container Images Release

Released 2023-08-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 2 records

TI-2023-03771 CVE-2023-4066 · GHSA-pp2q-hf69-vw5g

Operator: passwords defined in secrets shown in statefulset yaml

Priority LOW 24

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2023-09-27 Partial fix · 7.11.1-9, 7.11.1-12 CWE-313
TI-2023-03770 CVE-2023-4065 · GHSA-hhw6-q999-wqqq

Operator: plaintext password in operator log

Priority LOW 24

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00246 Published 2023-09-26 Partial fix · 7.11.1-9, 7.11.1-12 CWE-117