GHSA-8vh8-vc28-m2hf

ghsaUSosv

Potential to access user credentials from the log files when debug logging enabled

view advisory published 2019-11-20Licence: CC-BY-4.0

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-10212US	critical9.8	1.89% (79th)	—	2019-10-02
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials fr…

references

External citations — patches, advisories, analysis.

https://access.redhat.com/errata/RHSA-2019:2998WEB
https://access.redhat.com/errata/RHSA-2020:0727WEB
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10212WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-10212ADVISORY
https://security.netapp.com/advisory/ntap-20220210-0017WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan