VULNERABILITY INTELLIGENCE

CVE-2021-3425

CVSS score4.4 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2021-06-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

Weakness classification

  • secalert@redhat.com: CWE-532

Primary references