CVE-2023-4065

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-117 CWE-276

Affected software

Vendor	Product	Versions
Red Hat	RHEL-8 based Middleware Containers	—
Red Hat	RHEL-8 based Middleware Containers	—
Red Hat	Red Hat AMQ Broker 7	—

References

https://access.redhat.com/errata/RHSA-2023:4720Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-4065Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2224630Issue Tracking, Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4720Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-4065Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2224630Issue Tracking, Vendor Advisory

Timeline

Published: Sep 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-406505.5In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional executi CVE-2023-406514.4In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Sys CVE-2023-406524.4In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with Sys CVE-2023-406536.7In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution p CVE-2023-406546.7In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution p CVE-2023-406556.1A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla.CVE-2023-406566.1A reflected XSS vulnerability was discovered in the Quickform component for Joomla.CVE-2023-406576.1A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla.CVE-2023-406586.1A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla.CVE-2023-406596.1A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla.CVE-2023-40665.5A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArt CVE-2023-406606.6A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cry