Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat RHEL-8 based Middleware Containers, Red Hat AMQ Broker 7 — RHSA-2023:4720 Clear all filters
TI-2023-03771 CVE-2023-4066 · GHSA-pp2q-hf69-vw5g

Operator: passwords defined in secrets shown in statefulset yaml

Priority LOW 24

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2023-09-27 Partial fix · 7.11.1-9, 7.11.1-12 CWE-313
TI-2023-03770 CVE-2023-4065 · GHSA-hhw6-q999-wqqq

Operator: plaintext password in operator log

Priority LOW 24

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00246 Published 2023-09-26 Partial fix · 7.11.1-9, 7.11.1-12 CWE-117