← Back

CVE-2026-59271

nvd nist
Published: Aug 27, 2026Modified: Sep 1, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier

Affected (4)

Vmware
1 product
Spring Advanced Message Queuing Protocol
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Spring Advanced Message Queuing Protocol
Before 2.4.19
Spring Advanced Message Queuing Protocol
From 3.2.0 to 3.2.13
Spring Advanced Message Queuing Protocol
From 4.0.0 to 4.0.4.1
Spring Advanced Message Queuing Protocol
From 4.1.0 to 4.1.0.1

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.