CVE-2021-3763
First published: Tue Aug 24 2021(Updated: )
A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited information even when the role the user is assigned to should not be allow access to the management console. The main impact is to confidentiality as this flaw means some role bindings are incorrectly checked, some privileged meta information such as queue names and configuration details are disclosed but the impact is limited as not all information is accessible and there is no affect to integrity.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Amq Broker | =7.8.0 | |
| Redhat Amq Broker | =7.8.1 | |
| Redhat Amq Broker | =7.8.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2021-3763
- https://bugzilla.redhat.com/show_bug.cgi?id=2000654
- https://issues.redhat.com/browse/ENTMQBR-5372
- https://access.redhat.com/errata/RHSA-2021:3700
- https://access.redhat.com/security/cve/cve-2021-3763
- https://www.cve.org/CVERecord?id=CVE-2021-3763 https://nvd.nist.gov/vuln/detail/CVE-2021-3763
Frequently Asked Questions
What is the vulnerability ID for this flaw in Red Hat AMQ Broker?
The vulnerability ID for this flaw in Red Hat AMQ Broker is CVE-2021-3763.
What is the severity of CVE-2021-3763?
The severity of CVE-2021-3763 is medium (4).
How does this vulnerability impact confidentiality?
This vulnerability impacts confidentiality as it allows an existing user to access limited information even when they should not have access.
Which version of Red Hat AMQ Broker is affected by CVE-2021-3763?
Only version 7.8 of Red Hat AMQ Broker is affected by CVE-2021-3763.
How can I fix CVE-2021-3763?
To fix CVE-2021-3763, update Red Hat AMQ Broker to version 7.9.0 or newer.
- collector/redhat-cve
- collector/nvd-index
- agent/first-publish-date
- agent/last-modified-date
- agent/type
- agent/softwarecombine
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-3763
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/redhat
- canonical/redhat amq broker
- version/redhat amq broker/7.8.0
- version/redhat amq broker/7.8.1
- version/redhat amq broker/7.8.2
- package-manager/redhat