CVE-2023-4066

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Cleartext Storage in a File or on Disk pada redhat jboss a-mq, redhat jboss middleware +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.

Rincian

Terbit di NVD

27 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-313: Cleartext Storage in a File or on Disk
CWE-312: Cleartext Storage of Sensitive Information

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2023:4720 advisory vendor
• https://access.redhat.com/security/cve/CVE-2023-4066 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2224677 issue tracking · advisory vendor