CVE-2020-25640

Опубликовано: 24 нояб. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 3.5

EPSS Низкий

Описание

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1881637
Issue Tracking
Vendor Advisory
https://github.com/amqphub/amqp-10-resource-adapter/issues/13
Third Party Advisory
https://security.netapp.com/advisory/ntap-20201210-0001/
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1881637
Issue Tracking
Vendor Advisory
https://github.com/amqphub/amqp-10-resource-adapter/issues/13
Third Party Advisory
https://security.netapp.com/advisory/ntap-20201210-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:wildfly:*:*:*:*:*:*:*:*

Версия до 21.0.0 (исключая)

EPSS

Процентиль: 57%

0.00354

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-209

CWE-532

Связанные уязвимости

CVE-2020-25640

CVSS3: 5.3

redhat

больше 5 лет назад

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

CVE-2020-25640

CVSS3: 5.3

debian

около 5 лет назад

A flaw was discovered in WildFly before 21.0.0.Final where, Resource a ...

GHSA-jw3v-5ch2-wfmm

CVSS3: 5.3

github

почти 4 года назад

Wildfly logs plaintext passwords

EPSS

Процентиль: 57%

0.00354

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-209

CWE-532