Description

The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files.

Remediation

References

CVE-2014-0058

Related Vulnerabilities

WordPress Plugin Pinterest by BestWebSoft Cross-Site Scripting (1.0.4)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.3)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2398)

WordPress Plugin Sketchus Pricing Tables Unspecified Vulnerability (2.0)

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Unspecified Vulnerability (2.4.3)

Severity

Low

Tags

Missing Update Known Vulnerabilities CVE-2014-0058