Beveiligingsadvies

CVE-2019-3888

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-06-12 13:45:20
Laatst bijgewerkt 2024-08-04 19:19:18
Toegewezen door redhat
CVSS-score 5.3
Status PUBLISHED

Beschrijving

A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)