« Volver al listado

CVE-2025-4057

Estado: AplazadaMedia (5.5)—

A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Activemq — Activemq Artemis OperatorAIApache — Activemq ArtemisAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-4057",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-4057",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-27T14:25:10.764022Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secalert@redhat.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2.0.3",
              "versionType": "semver"
            }
          ],
          "packageName": "activemq-artemis-operator",
          "collectionURL": "https://github.com/arkmq-org/activemq-artemis-operator",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el9"
          ],
          "vendor": "Red Hat",
          "product": "AMQ Broker 7.13.0.OPR.1.GA",
          "packageName": "activemq-artemis-operator",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:amq_broker:7.12"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat AMQ Broker 7.12.5",
          "packageName": "activemq-artemis-operator",
          "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "vendor": "Red Hat",
          "product": "RHEL-8 based Middleware Containers",
          "versions": [
            {
              "status": "unaffected",
              "version": "7.12.5-2",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "amq7/amq-broker-init-rhel8",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "vendor": "Red Hat",
          "product": "RHEL-8 based Middleware Containers",
          "versions": [
            {
              "status": "unaffected",
              "version": "7.12.5-2",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "amq7/amq-broker-rhel8",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "vendor": "Red Hat",
          "product": "RHEL-8 based Middleware Containers",
          "versions": [
            {
              "status": "unaffected",
              "version": "7.12.5-2",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "amq7/amq-broker-rhel8-operator",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "vendor": "Red Hat",
          "product": "RHEL-8 based Middleware Containers",
          "versions": [
            {
              "status": "unaffected",
              "version": "7.12.5-2",
              "lessThan": "*",
              "versionType": "rpm"
            }
          ],
          "packageName": "amq7/amq-broker-rhel8-operator-bundle",
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-05-26T10:15:21.437",
  "references": [
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:12355",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:12473",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2025:8147",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://access.redhat.com/security/cve/CVE-2025-4057",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362827",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/arkmq-org/activemq-artemis-operator/commit/d3482fab6d0060794226c9e5a6fa67d209abc35a",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/arkmq-org/activemq-artemis-operator/issues/1130",
      "source": "secalert@redhat.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1391"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies."
    },
    {
      "lang": "es",
      "value": "Se detectó una falla en ActiveMQ Artemis. La contraseña generada por activemq-artemis-operator no se regenera entre dependencias CR separadas."
    }
  ],
  "lastModified": "2026-06-17T09:32:24.307",
  "sourceIdentifier": "secalert@redhat.com"
}