GHSA-jw3v-5ch2-wfmm

ghsaUSosv

Wildfly logs plaintext passwords

view advisory published 2022-02-15Licence: CC-BY-4.0

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25640US	medium5.3	1.35% (71st)	—	2020-11-24
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in t…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=1881637WEB
https://github.com/amqphub/amqp-10-resource-adapter/issues/13WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25640ADVISORY
https://security.netapp.com/advisory/ntap-20201210-0001WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan