CVE-2024-8689
Sept. 12, 2024, 12:35 p.m.
Tags
Product(s) Impacted
Cortex XSOAR
Cortex XSIAM
Description
A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of the configured ActiveMQ credentials in log bundles.
Weaknesses
CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE ID: 312Date
Published: Sept. 11, 2024, 5:15 p.m.
Last Modified: Sept. 12, 2024, 12:35 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
psirt@paloaltonetworks.com
References
https://security.paloaltonetworks.com/
psirt@paloaltonetworks.com