A critical vulnerability in Apache Artemis allows unauthenticated attackers to steal administrative credentials during the cluster discovery process, posing a severe risk to messaging infrastructure.

The flaw stems from missing authentication for a critical function (CWE-306) during the cluster connection handshake, which permits an unauthenticated attacker to intercept sensitive administrative credentials.

Successful exploitation allows an attacker to gain full administrative control over the messaging cluster. This leads to complete compromise of message confidentiality and integrity, potentially allowing for unauthorized data exfiltration or manipulation of critical business communications. Given the CVSS score of 9.1, this vulnerability represents a critical threat that could lead to significant operational disruption and data loss.

Immediate Action: Upgrade to Apache Artemis or ActiveMQ Artemis version 2.57.0 or later immediately to resolve the authentication flaw.

Proactive Monitoring: Monitor network traffic for unusual cluster connection requests and review server logs for unauthorized access attempts or suspicious handshake patterns.

Compensating Controls: Implement strict network segmentation to restrict access to the discovery port solely to authorized cluster members.

Public Exploit Available: exploit_available (unknown)

The severity of this vulnerability, combined with the ease of exploitation, necessitates an immediate patching cycle. Organizations running affected versions of Apache Artemis must prioritize upgrading to version 2.57.0 to prevent unauthorized access and protect sensitive administrative credentials. Failure to remediate this issue exposes the messaging infrastructure to complete compromise.