CVE-2020-10727: Medium severity Apache ActiveMQ Artemis vulnerability
A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the resetUsers operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.
Other sources
If you execute the resetUsers operation, the new password is stored in plain text in the etc/artemis-users.properties file.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/ActiveMQ Artemisto a version that resolves this vulnerability.Fixed in 2.12.0 - Compensating control
Avoid using the ActiveMQ Artemis management API `resetUsers` operation; instead, reset users via the broker instance CLI `/bin/artemis user reset`, which is not affected by the plaintext shadow file issue.
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-10727?
CVE-2020-10727 is a vulnerability found in ActiveMQ Artemis management API versions 2.7.0 up until 2.12.0.
How severe is CVE-2020-10727?
CVE-2020-10727 has a severity rating of 5.5, which is considered medium.
How does CVE-2020-10727 work?
CVE-2020-10727 allows a local attacker to read the plaintext passwords stored in the Artemis shadow file.
Which software packages are affected by CVE-2020-10727?
ActiveMQ Artemis versions 2.7.0 up until 2.12.0 are affected by CVE-2020-10727.
How can I fix CVE-2020-10727?
To fix CVE-2020-10727, you should upgrade to ActiveMQ Artemis version 2.12.0 or later.