BIT-wildfly-2020-25640

vendorUSosv

view advisory published 2024-03-06Licence: per source

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25640US	medium5.3	1.35% (71st)	—	2020-11-24
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in t…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=1881637ADVISORY
https://github.com/amqphub/amqp-10-resource-adapter/issues/13ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2020-25640WEB
https://security.netapp.com/advisory/ntap-20201210-0001/ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan