Description
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.
Remediation
References
Related Vulnerabilities
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.2)
WordPress 4.2.x Directory Traversal (4.2 - 4.2.37)
WordPress Plugin WooCommerce Unspecified Vulnerability (4.2.0)
WordPress Plugin Woo Custom Checkout Field Multiple Vulnerabilities (1.3.2)
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17310)