Listen to this Post
How CVE-2025-27391 Works
The vulnerability occurs when Apache ActiveMQ Artemis logs sensitive broker properties at debug level. When the `org.apache.activemq.artemis.core.config.impl.ConfigurationImpl` logger is set to debug, it records all configuration values, including credentials and other sensitive data, into log files. Attackers with access to these logs can extract critical information, potentially leading to further system compromise. This affects versions from 1.5.1 before 2.40.0.
DailyCVE Form
Platform: Apache ActiveMQ Artemis
Version: 1.5.1 – 2.39.0
Vulnerability: Info Disclosure
Severity: Medium
Date: 07/14/2025
Prediction: Patch expected 08/2025
What Undercode Say
Analytics:
grep -r "org.apache.activemq.artemis.core.config.impl.ConfigurationImpl" /var/log/activemq log4j.logger.org.apache.activemq.artemis.core.config.impl.ConfigurationImpl=ERROR
How Exploit:
- Access debug logs
- Extract credentials
- Escalate privileges
Protection from this CVE:
- Upgrade to 2.40.0
- Restrict log access
- Disable debug logging
Impact:
- Sensitive data exposure
- Unauthorized access
- Broker compromise
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
