CVE-2023-0833 Red hat a-mq streams: component version with information disclosure flaw
An authenticated attacker can trigger an exception in the bundled OKHttp component to access unauthorized information via error messages.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-0833?
CVE-2023-0833 is a medium-severity vulnerability in Red Hat AMQ Streams 2.2.1, published on 27 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.
Weakness: CWE-209
Which versions are affected by CVE-2023-0833?
It affects 2 products.
Products include Redhat A-Mq Streams, Squareup Okhttp.
How do I fix CVE-2023-0833?
Upgrade to a fixed version.
Is CVE-2023-0833 being exploited?
There is no known exploitation of CVE-2023-0833 in the wild and no public exploit code.
Other vulnerabilities in Red Hat AMQ Streams 2.2.1
Sources
Also known as CLEANSTART-2026-KK42580, CLSA-2026-1774398092, GHSA-8fhc-q55v-jvx2.