Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-4065

Operator: plaintext password in operator log

Description

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.11.1-9 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.11.1-12 to < *unaffected

Red Hat Red Hat AMQ Broker 7

Default version status: affected

References