A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.
The product writes sensitive information to a log file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jboss_a-mq | Redhat | 7 (including) | 7 (including) |
| Red Hat AMQ 7.8.2 | RedHat | broker | * |
| Red Hat AMQ 7.9.0 | RedHat | broker | * |