https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:05:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-03229 bdu:2020-03229 https://cve.radiocsirt.org/vuln/bdu:2020-03229 https://cve.radiocsirt.org/vuln/cnvd-2021-22582 cnvd-2021-22582 https://cve.radiocsirt.org/vuln/cnvd-2021-22582 https://cve.radiocsirt.org/vuln/euvd-2026-40028 EUVD-2026-40028 https://cve.radiocsirt.org/vuln/euvd-2026-40028 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10727 <p>A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.</p> <p>A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10727 https://cve.radiocsirt.org/vuln/ghsa-q9g8-9hpp-xc82 <p><strong>Affected:</strong> Maven: org.apache.activemq:artemis-commons</p> <p>A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.</p> <p><strong>Affected:</strong> Maven: org.apache.activemq:artemis-commons</p> <p>A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.</p> https://cve.radiocsirt.org/vuln/ghsa-q9g8-9hpp-xc82 https://cve.radiocsirt.org/vuln/gsd-2020-10727 gsd-2020-10727 https://cve.radiocsirt.org/vuln/gsd-2020-10727 https://cve.radiocsirt.org/vuln/rhsa-2020:2751 <p>apache-commons-configuration: uncontrolled class instantiation when loading YAML files broker: resetUsers operation stores password in plain text netty: compression/decompression codecs don&#39;t enforce limits on buffer allocation sizes</p> <p>apache-commons-configuration: uncontrolled class instantiation when loading YAML files broker: resetUsers operation stores password in plain text netty: compression/decompression codecs don&#39;t enforce limits on buffer allocation sizes</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2751