Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.

CVE-2023-4065 is a vulnerability identified in the Red Hat AMQ Broker Operator component used within RHEL-8 based Middleware Containers. The issue arises from improper output neutralization for logs (CWE-117), where sensitive information such as passwords defined in the ActiveMQArtemisAddress Custom Resource (CR) is logged in plaintext within the Operator logs. This flaw allows an authenticated local attacker with low privileges to read operator logs and extract passwords that should be protected, thereby gaining access to information beyond their authorized permissions. The vulnerability has a CVSS 3.1 base score of 5.5, indicating medium severity, with an attack vector of local access (AV:L), low attack complexity (AC:L), and requiring privileges (PR:L) but no user interaction (UI:N). The impact is primarily on confidentiality (C:H) without affecting integrity or availability. Although no known exploits have been reported in the wild, the exposure of plaintext credentials in logs presents a significant risk for lateral movement or privilege escalation within affected environments. The vulnerability affects middleware containers based on Red Hat Enterprise Linux 8, commonly used in enterprise messaging and integration platforms. The flaw underscores the importance of secure logging practices, especially in environments handling sensitive credentials and configurations.

Detailed information about CVE-2023-4065: Improper Output Neutralization for Logs in Red Hat RHEL-8 based Middleware Containers affecting Red Hat RHEL-8 based M

CVE-2023-4065: Improper Output Neutralization for Logs in Red Hat RHEL-8 based Middleware Containers - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-4065: Improper Output Neutralization for Logs in Red Hat RHEL-8 based Middleware Containers

Threats Tagged 'cve-2023-4065'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-4065'

Lead Pen Test Professional