CVE-2023-4065

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Sep 27, 2023
Updated: Jul 3, 2024
CWE ID 117
CWE ID 276

Summary

CVE-2023-4065 is a vulnerability affecting Red Hat AMQ Broker Operator. The issue arises due to the operator displaying in plain text, within the Operator Log, a password defined in ActiveMQArtemisAddress CR. As a consequence, authenticated local attackers can gain unauthorized access to information beyond their granted permissions. This vulnerability poses a security risk and requires immediate attention to mitigate it.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Red Hat Openshift Container Platform
  • Red Hat JBoss Middleware
  • Red Hat JBoss AMQ

Affected Vendors

  • Red Hat