CVE-2021-3425CWE-532

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the…

published June 1, 2021

CVSS
—
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2021-06-01T19:07Z
EPSS history
Timeline
  • 01 JUN 19:07Z
    A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the…
    cvelistv5