4.8
Medium
CVE-2019-10212 A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security
Description
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| undertow | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2019:2998 access.redhat.com
- RHSA-2020:0727 access.redhat.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified