SB2026082174 - Information Exposure Through an Error Message in RabbitMQ Java Client Library

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026082174

SB2026082174 - Information Exposure Through an Error Message in RabbitMQ Java Client Library

Published: August 21, 2026

Security Bulletin ID SB2026082174
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Information Exposure Through an Error Message (CVE-ID: N/A)

CWE-ID: CWE-209 - Information Exposure Through an Error Message

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to insertion of sensitive information into an error message in ConnectionFactoryConfigurator.load() when parsing a property-file or map-supplied AMQP URI. A local user can supply a malformed connection URI to disclose sensitive information.

The issue is triggered when connection setup fails while processing the uri key, and the resulting exception message can include plaintext username and password from the AMQP URI.


Remediation

Install update from vendor's website.

References