CVE-2024-8689: ActiveMQ Content Pack: Cleartext Exposure of Credentials
Published Sep 11, 2024
·Updated
A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of the configured ActiveMQ credentials in log bundles.
Affected Software
1 affected component
Apache ActiveMQ
Remediation
Information
This issue is fixed in ActiveMQ Content Pack 1.1.15 and all later versions. You can download the content pack from https://cortex.marketplace.pan.dev/marketplace/details/ActiveMQ/ .
You should use new ActiveMQ credentials for ActiveMQ integration only after you upgrade it to a fixed version. You should also revoke the previously existing credentials to prevent the misuse of exposed credentials.
Event History
Sep 11, 2024
CVE Published
via MITRE·04:42 PM
Data Sourced
via MITRE·04:42 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-8689?
CVE-2024-8689 is classified as a medium severity vulnerability due to the potential exposure of sensitive credentials.
2
How do I fix CVE-2024-8689?
To fix CVE-2024-8689, you should ensure that sensitive information, including ActiveMQ credentials, is not logged in cleartext.
3
What software is affected by CVE-2024-8689?
CVE-2024-8689 affects Apache ActiveMQ integrated with Cortex XSOAR and Cortex XSIAM.
4
What are the implications of CVE-2024-8689?
The implications of CVE-2024-8689 include unauthorized access to ActiveMQ due to exposed credentials in log files.
5
How can I prevent CVE-2024-8689 in the future?
To prevent CVE-2024-8689 in the future, implement proper logging practices and ensure sensitive data is stored securely.