5.3
Medium
CVE-2019-3888 A vulnerability was found in Undertow web server before 2.0.21
Description
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| undertow | 2.0.21 | No fix stated |
Other CVEs of undertow
The 7 CVEs of undertow →
CVE-2020-10719
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with…
6.5
Medium
CVE-2020-1757
A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and…
8.1
High
CVE-2019-14888
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS
7.5
High
CVE-2018-14642
An information leak vulnerability was found in Undertow
5.3
Medium