Use of Weak Credentials in activemq-artemis-operator - CVE-2025-4057

Vulnerability details

The vulnerability allows an attacker to gain unauthorized access to the application.

The vulnerability exists due to the application does not regenerate password between separated CR dependencies. A remote attacker with knowledge of an old passwords or with the ability t guess one can gain unauthorized access to the application. 

Affected software

How to mitigate CVE-2025-4057

External References

• https://bugzilla.redhat.com/show_bug.cgi?id=2362827
• https://github.com/advisories/GHSA-q5q7-8x6x-hcg2

Related Security Bulletins

• Use of Weak Credentials in AMQ Broker 7.13
• Use of weak credential in activemq-artemis-operator
• Use of Weak Credentials in AMQ Broker 7.12
• Use of Weak Credentials in AMQ Broker 7.12