CVE search

402.405 vulnerabilities · 1.766 actively exploited (CISA KEV)

6 results

ID	Severity	Summary	Published
CVE-2023-4066	MÉDIO5.5	A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.	27/09/2023
CVE-2023-4065	MÉDIO5.5	A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.	27/09/2023
CVE-2023-4853	ALTO8.1	A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possi