medium5.5
CVE-2025-4057
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse
Impact
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/arkmq-org/activemq-artemis-operator | <= 0.0.0-20250418141202-b262048e6a75 | none recorded |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://access.redhat.com/errata/RHSA-2025:12355
- https://access.redhat.com/errata/RHSA-2025:12473
- https://access.redhat.com/errata/RHSA-2025:8147
- https://access.redhat.com/security/cve/CVE-2025-4057
- https://bugzilla.redhat.com/show_bug.cgi?id=2362827
- https://github.com/arkmq-org/activemq-artemis-operator/commit/d3482fab6d0060794226c9e5a6fa67d209abc35a
- https://github.com/arkmq-org/activemq-artemis-operator/issues/1130
- https://github.com/advisories/GHSA-q5q7-8x6x-hcg2
- https://nvd.nist.gov/vuln/detail/CVE-2025-4057