Medium severity4.7OSV Advisory· Published Sep 27, 2023· Updated Jun 23, 2026

CVE-2023-0833

Description

A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/AMQ-Streams2 versions
cpe:2.3:a:redhat:a-mq_streams:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:a-mq_streams:*:*:*:*:*:*:*:*range: <2.2.1
- (no CPE)
Square/OkhttpOSV2 versions
list, parent-2.3.0, parent-2.4.0, …+ 1 more
- (no CPE)range: list, parent-2.3.0, parent-2.4.0, …
- cpe:2.3:a:squareup:okhttp:*:*:*:*:*:*:*:*range: <4.9.2

Patches

Vulnerability mechanics

References

github.com/square/okhttp/issues/6738nvdExploitIssue TrackingThird Party Advisory
access.redhat.com/errata/RHSA-2023:1241nvdThird Party Advisory
access.redhat.com/errata/RHSA-2023:3223nvdThird Party Advisory
access.redhat.com/security/cve/CVE-2023-0833nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000