CVE-2025-4057

EUVD-2025-22757
A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
redhatCNA
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2025:12355
https://access.redhat.com/errata/RHSA-2025:12473
https://access.redhat.com/errata/RHSA-2025:8147
https://access.redhat.com/security/cve/CVE-2025-4057
https://bugzilla.redhat.com/show_bug.cgi?id=2362827
https://github.com/arkmq-org/activemq-artemis-operator/commit/d3482fab6d0060794226c9e5a6fa67d209abc35a
https://github.com/arkmq-org/activemq-artemis-operator/issues/1130