exploitDog

CVE-2021-3425

Опубликовано: 08 мар. 2021

Источник: redhat

CVSS3: 4.4

EPSS Низкий

Описание

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2021-3425
https://nvd.nist.gov/vuln/detail/CVE-2021-3425

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-532

https://bugzilla.redhat.com/show_bug.cgi?id=1936629Broker: discloses JDBC username and password in the application log file

EPSS

Процентиль: 21%

0.00286

Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVE-2021-3425

CVSS3: 4.4

nvd

больше 5 лет назад

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

GHSA-4h8h-q487-wmvf

github

больше 4 лет назад

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

EPSS

Процентиль: 21%

0.00286

Низкий

4.4 Medium

CVSS3