title: Passwords defined in secrets shown in statefulset yaml
description: A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.
problem types: Cleartext Storage in a File or on Disk
affected:
{
product: AMQ
vendor: n/a
versions:
version: Broker Operator 7.11.1, status: unaffected
}
{
vendor: Red Hat
product: RHEL-8 based Middleware Containers
collectionURL: https://catalog.redhat.com/software/containers/
packageName: amq7/amq-broker-rhel8-operator
defaultStatus: affected
versions:
version: 7.11.1-9, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:rhosemc:1.0::el8
}
{
vendor: Red Hat
product: RHEL-8 based Middleware Containers
collectionURL: https://catalog.redhat.com/software/containers/
packageName: amq7/amq-broker-rhel8-operator-bundle
defaultStatus: affected
versions:
version: 7.11.1-12, lessThan: *, versionType: rpm, status: unaffected
cpe: cpe:/a:redhat:rhosemc:1.0::el8
}
{
vendor: Red Hat
product: Red Hat JBoss A-MQ 7
collectionURL: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
packageName: activemq-broker-operator
defaultStatus: affected
cpes: cpe:/a:redhat:amq_broker:7
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]