CVE-2021-3425

MEDIUM

4.4

Beschreibung

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

CVE Details

CVSS v3.1 Bewertung4.4

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht6/1/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

redhat:jboss_a-mq

Schwachen (CWE)

CWE-532

Referenzen

https://bugzilla.redhat.com/show_bug.cgi?id=1936629(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=1936629(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.