Описание
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | ignored | end of life |
| lucid | DNE | |
| maverick | DNE | |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 5.5.34 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 6.0.32-5 |
| hardy | DNE | |
| lucid | released | 6.0.24-2ubuntu1.9 |
| maverick | released | 6.0.28-2ubuntu1.5 |
| natty | released | 6.0.28-10ubuntu2.2 |
| oneiric | not-affected | 6.0.32-5 |
| upstream | released | 6.0.33 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 7.0.16-3 |
| hardy | DNE | |
| lucid | DNE | |
| maverick | DNE | |
| natty | DNE | |
| oneiric | not-affected | 7.0.16-3 |
| upstream | released | 7.0.17 |
Показывать по
EPSS
1.9 Low
CVSS2
Связанные уязвимости
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file.
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7 ...
Insertion of Sensitive Information into Log File in Apache Tomcat
EPSS
1.9 Low
CVSS2