https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T08:30:40.826934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-27391 CVE-2025-27391 — Apache ActiveMQ Artemis: Passwords leaking from broker properties in the debug log 2026-10-09T08:30:40.828055+00:00

Affected: Apache Software Foundation Apache ActiveMQ Artemis

Insertion of Sensitive Information into Log File vulnerability in Apache ActiveMQ Artemis. All the values of the broker properties are logged when the org.apache.activemq.artemis.core.config.impl.ConfigurationImpl logger has the debug level enabled.

This issue affects Apache ActiveMQ Artemis: from 1.5.1 before 2.40.0. It can be mitigated by restricting log access to only trusted users.

Users are recommended to upgrade to version 2.40.0, which fixes the issue.