A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jboss_a-mq | Redhat | 7 (including) | 7 (including) |
| Red Hat AMQ 7.8.2 | RedHat | broker | * |
| Red Hat AMQ 7.9.0 | RedHat | * |