CVE-2023-0833
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A flaw was found in Red Hat's AMQ-Streams, which affects the OKHttp component. The issue involves information disclosure via an exception triggered by a header containing an illegal value.
Risk Assessment
This vulnerability could allow an authenticated attacker to access information outside of their regular permissions, posing a significant threat to data security.
Recommendation
It is recommended to update the OKHttp component to the latest version and monitor logs for potential exploitation attempts.
Original NVD description (English source)
A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.