CVE-2021-3425 Information disclosure in broker

Medium 4.4 Published 1 Jun 2021 Updated 3 Aug 2024

Attackers can read encrypted JDBC credentials from AMQ Broker logs when using JDBC persistence, exposing sensitive database access information.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-3425?

CVE-2021-3425 is a medium-severity vulnerability in broker, published on 1 Jun 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

Weakness: CWE-532

Which versions are affected by CVE-2021-3425?

It affects 1 product.

Products include Redhat Jboss A-Mq.

How do I fix CVE-2021-3425?

No fix has been published for CVE-2021-3425 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-3425 being exploited?

There is no known exploitation of CVE-2021-3425 in the wild and no public exploit code.

Sources

Also known as GHSA-4h8h-q487-wmvf.