CVE-2023-4066

概要

参考情報

• access.redhat.com/errata/RHSA-2023:4720 · Vendor Advisory
• access.redhat.com/security/cve/CVE-2023-4066 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

jboss a-mq のその他の脆弱性

• CVE-2023-44487高 7.5悪用確認済み（CISA KEV）The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as…
• CVE-2023-4065中 5.5A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in …
• CVE-2023-1664中 6.5A flaw was found in Keycloak. This flaw depends on a non-default configuration "Revalidate Client Certificate" to be enabled and the reverse…
• CVE-2022-1278高 7.5A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
• CVE-2020-14379中 5.6A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service…