[GHSA-h6w7-qmcm-q6xr] RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()

[HonorableSudoku]

Updates

• CWEs

Comments
@sonicnew can u please update CWE in GitHub Advisory Database?
It was already mentioned in
#10217

[github]

Hi there @acogoluegnes! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[HonorableSudoku]

In the global advisory still wrong CWE. Can anyone help with changing it?
GHSA-h6w7-qmcm-q6xr

[acogoluegnes]

Duplicate of #10217.

[HonorableSudoku]

@acogoluegnes it is, but in global advisory there is still wrong CWE. How it can be fixed?

[acogoluegnes]

@acogoluegnes it is, but in global advisory there is still wrong CWE. How it can be fixed?

It may take some time for GitHub to review those PRs, the process may be manual, so bear with them. Creating duplicates is counter-productive, it just makes the backlog bigger. I flagged the PR as a duplicate, this should help them filter it out instead of investigating it for nothing.

I don't work at GitHub, so I'm just assuming what the process is. What I know is I'm getting notified for these PRs because I'm the creator of the advisory and this is the 3rd PR in less than a week, this is getting annoying.