Description

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.

Remediation

References

CVE-2015-1849

Related Vulnerabilities

Apache 2.x version equal to 2.0.51

OpenSSL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1633)

phpMyFAQ Improper Authentication Vulnerability (CVE-2023-0311)

Oracle Database Server CVE-2006-3703 Vulnerability (CVE-2006-3703)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-33816)

Severity

Medium

Classification

CVE-2015-1849 CWE-200 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities