Description

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.

Remediation

References

CVE-2024-1102

Related Vulnerabilities

Liferay Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-28885)

concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11476)

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.3.9)

PHP Improper Input Validation Vulnerability (CVE-2007-4783)

MODX Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-1000207)

Severity

Medium

Classification

CVE-2024-1102 CWE-200 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities