CVE-2023-4065: Operator: plaintext password in operator log
A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.
Other sources
The password defined in ActiveMQArtemisAddress CR is shown in plain text in the Operator Log. An authed attacker could use this flaw to access information outside of their permissions.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-4065?
CVE-2023-4065 is a vulnerability found in Red Hat AMQ Broker Operator where it displays a password defined in ActiveMQArtemisAddress CR in plain text in the Operator Log.
What is the severity of CVE-2023-4065?
CVE-2023-4065 has a severity rating of 5.5, which is considered medium.
How does CVE-2023-4065 affect Red Hat AMQ Broker?
CVE-2023-4065 affects Red Hat AMQ Broker version 7.11.1.
How can an attacker exploit CVE-2023-4065?
An authenticated local attacker can exploit CVE-2023-4065 to access information outside of their permissions.
Is Red Hat Enterprise Linux 8.0 vulnerable to CVE-2023-4065?
No, Red Hat Enterprise Linux 8.0 is not vulnerable to CVE-2023-4065.