Vulnerability · Published Jun 1, 2021 · Assigned by redhat

CVE-2021-3425

Medium 4.4

In plain English

A medium-severity sensitive data in logs in broker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS NVD)4.4Medium

Exploit odds (30 days)0.3%top 78.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

Affected products (as reported)

Vendor	Product	Versions
n/a	broker	as shipped in Red Hat AMQ 7

Weakness: CWE-532

References

https://bugzilla.redhat.com/show_bug.cgi?id=1936629 x_refsource_MISC