Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jw3v-5ch2-wfmm

Опубликовано: 15 фев. 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.3

Описание

Wildfly logs plaintext passwords

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

Пакеты

Наименование

org.wildfly:wildfly-parent

maven
Затронутые версииВерсия исправления

< 21.0.0.Final

21.0.0.Final

EPSS

Процентиль: 57%
0.00354
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209
CWE-532

Связанные уязвимости

CVSS3: 5.3
redhat
больше 5 лет назад

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

CVSS3: 5.3
nvd
около 5 лет назад

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

CVSS3: 5.3
debian
около 5 лет назад

A flaw was discovered in WildFly before 21.0.0.Final where, Resource a ...

EPSS

Процентиль: 57%
0.00354
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-209
CWE-532