CVE-2021-3425

4.4 mediumEPSS 0.3%

Medium (4.4) in redhat jboss a-mq. EPSS 0.3% chance of exploitation in the next 30 days.

A flaw was found in the AMQ Broker that discloses JDBC encrypted usernames and passwords when provided in the AMQ Broker application logfile when using the jdbc persistence functionality. Versions shipped in Red Hat AMQ 7 are vulnerable.

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2021-06-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:jboss_a-mq

References

https://bugzilla.redhat.com/show_bug.cgi?id=1936629
https://bugzilla.redhat.com/show_bug.cgi?id=1936629

Check your stack JSON