CVE-2025-4057
Activemq-artemis-operator: amq broker operator starting credentials reuse
CVE-2025-4057 is a medium vulnerability (CVSS 5.5) in Red Hat Amq Broker 7.13.0.opr.1.ga, published May 26, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. No source names a fixed version.
- Severity
- 5.5 MediumCVSS 3.1, CVE List
- Exploit chance
- 0.18%EPSS, 7th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/arkmq-org/activemq-artemis-operatorGo | through 0.0.0-20250418141202-b262048e6a75 | None known |
github.com/arkmq-org/activemq-artemis-operatorGo | All versions | None known |
govulncheck-vulndbopenSUSE:Tumbleweed From an advisory covering 3 CVEs | before 0.0.20250529T205903-1.1 | 0.0.20250529T205903-1.1 |
What each source reports
CVE List Score used
Activemq-artemis-operator: amq broker operator starting credentials reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
- Record
CVE-2025-4057- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-1391
- Updated
- 2026-11-02
EUVDEUVD-2025-22757
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
- Record
EUVD-2025-22757- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-q5q7-8x6x-hcg2
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
- Record
GHSA-q5q7-8x6x-hcg2- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-1391
- Updated
- 2026-11-02
NVD
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
- Record
CVE-2025-4057- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-1391
- Updated
- 2026-11-02
OSV
Activemq-artemis-operator: amq broker operator starting credentials reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
- Record
CVE-2025-4057- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-1391
- Updated
- 2026-11-02
OSVGHSA-q5q7-8x6x-hcg2
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
- Record
GHSA-q5q7-8x6x-hcg2- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-1391
- Updated
- 2026-11-02
OSVGO-2025-3717No score
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse in github.com/arkmq-org/activemq-artemis-operator
ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse in github.com/arkmq-org/activemq-artemis-operator
- Record
GO-2025-3717- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15188-1No score
govulncheck-vulndb-0.0.20250529T205903-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250529T205903-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15188-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
access.redhat.com/errata/RHSA-2025:12355
bugzilla.redhat.com/show_bug.cgi?id=2362827
github.com/arkmq-org/activemq-artemis-operator/commit/d3482fab6d0060794226c9e5a6fa67d209abc35a
Show 12 moreShow less
nvd.nist.gov/vuln/detail/CVE-2025-4057
catalog.redhat.com/software/containers
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5W5NDYFJCKVTB2UYZO6OSRFA7RGWGHY3
suse.com/security/cve/CVE-2025-4057