GHSA-q5q7-8x6x-hcg2
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/arkmq-org/activemq-artemis-operator | <= 0.0.0-20250418141202-b262048e6a75 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2025-4057
- https://github.com/arkmq-org/activemq-artemis-operator/issues/1130
- https://github.com/arkmq-org/activemq-artemis-operator/commit/d3482fab6d0060794226c9e5a6fa67d209abc35a
- https://access.redhat.com/errata/RHSA-2025:12355
- https://access.redhat.com/errata/RHSA-2025:12473
- https://access.redhat.com/errata/RHSA-2025:8147
- https://access.redhat.com/security/cve/CVE-2025-4057
- https://bugzilla.redhat.com/show_bug.cgi?id=2362827
- https://github.com/arkmq-org/activemq-artemis-operator