CVE-2021-3425

2021-06-0119:07:40

CWE-532

redhat

www.cve.org

amq broker

jdbc persistence

red hat amq 7

vulnerability

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

CNA Affected

[
  {
    "product": "broker",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "as shipped in Red Hat AMQ 7"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1936629