Description

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

Remediation

References

CVE-2019-10212

Related Vulnerabilities

Oracle Database Server CVE-2009-1971 Vulnerability (CVE-2009-1971)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Multiple Vulnerabilities (5.2.3)

WordPress Plugin Gift Vouchers (Gift Cards and Packages) (WooCommerce Supported) SQL Injection (1.0.5)

ProjectSend Use of Insufficiently Random Values Vulnerability (CVE-2024-7659)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4285)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-532 CVE-2019-10212