CVE-2023-4065CWE-117

Operator: plaintext password in operator log

Medium · published September 26, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2023-09-26T13:25Z
EPSS history
Timeline
  • 26 SEP 13:25Z
    Operator: plaintext password in operator log
    cvelistv5