CVE-2025-4057: falha de média gravidade em activemq-artemis-operator
Activemq-artemis-operator: amq broker operator starting credentials reuse
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.2%
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
activemq-artemis-operatorRed Hat · AMQ Broker 7.13.0.OPR.1.GARed Hat · Red Hat AMQ Broker 7.12.5Red Hat · RHEL-8 based Middleware ContainersReferências
https://access.redhat.com/errata/RHSA-2025:12355https://access.redhat.com/errata/RHSA-2025:12473https://access.redhat.com/errata/RHSA-2025:8147https://access.redhat.com/security/cve/CVE-2025-4057https://bugzilla.redhat.com/show_bug.cgi?id=2362827https://github.com/arkmq-org/activemq-artemis-operator/commit/d3482fab6d0060794226c9e5a6fa67d209abc35ahttps://github.com/arkmq-org/activemq-artemis-operator/issues/1130