CyberRota Analysis
AI-GeneratedThe vulnerability affects specific versions of Spring AMQP, where a failure in the RabbitMQ management aliveness check exposes the configured admin password in cleartext within the exception message. This could lead to unauthorized access if an attacker can view the logs or exception output. Organizations using the affected versions should prioritize remediation to protect sensitive credentials from potential exploitation.
CVE
CVE-2026-59271
Severity
MEDIUM
CVSS
5.3
EPSS
0.32%
Original NVD Description
When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier
Related CVEs
Other vulnerabilities affecting the same vendor(s)