Skip to content
OpenAdvisories
Medium WID-SEC-2023-2159 2 CVEs

Red Hat OpenShift AMQ Broker: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Aug 23, 2023 · Updated Aug 23, 2023 · de-DE

Vendor: Red Hat Product: OpenShift AMQ Broker < 7.11.1 Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift AMQ Broker ausnutzen, um Informationen offenzulegen.

Product

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Vulnerabilities 2

  • Medium 5.5
    CVE-2023-4065

    Operator: plaintext password in operator log

    A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.

    Red Hat RHEL-8 based Middleware Containers Red Hat AMQ Broker 7
  • Medium 5.5
    CVE-2023-4066

    Operator: passwords defined in secrets shown in statefulset yaml

    A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.

    Red Hat RHEL-8 based Middleware Containers Red Hat AMQ Broker 7

Revision history

  1. #1

    Initiale Fassung

References