Advisoriesby IbisVMwareCVE-2026-59271
VMware Spring AMQP: information disclosure in errors
No fix yet
When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message.
Spring AMQP 4.1.0
Spring AMQP 4.0.0 - 4.0.4
Spring AMQP 3.2.0 - 3.2.12
Spring AMQP 2.4.18 and earlier
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Spring AMQP Product | <= 4.1.0 | No fix yet |
| >= 4.0.0, <= 4.0.4 | No fix yet | |
| >= 3.2.0, <= 3.2.12 | No fix yet | |
| <= 2.4.18 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-209