CVE-2020-10727

Katalog CVE

CVSS 5.5 · Medium EPSS 0,70%

Kerentanan Cleartext Storage of Sensitive Information pada apache artemis, netapp oncommand workflow automation. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.

Rincian

Terbit di NVD

26 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-312: Cleartext Storage of Sensitive Information
CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,70% peluang dieksploitasi; lebih tinggi dari 51,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1827200 issue tracking · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210827-0001/ advisory pihak ketiga
• https://issues.redhat.com/browse/ENTMQBR-3435 permissions required