Vulnerability in Redhat Amq_broker
CVE-2022-1833
A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where the AMQ Operator is deployed has access to clusterwide edit rights by checking the secrets…
EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Redhat Amq_broker — versions 7.9.4
- N/a Amq Broker Operator — versions AMQ Broker Operator 7.9.4 and prior
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_MISC, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-1833?
- CVE-2022-1833 is a high-severity vulnerability in Redhat Amq_broker, classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2022-06-21.
- How severe is CVE-2022-1833?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2022-1833 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.