Skip to content
fr Sign in
6.5 Medium

CVE-2024-1102 A vulnerability was found in jberet-core logging

Description

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.

Affected products and versions

Product Affected versions Fixed in
Red Hat JBoss Enterprise Application Platform 1.3 earliest → < 1.3.9.SP3-redhat-00001 1.3.9.SP3-redhat-00001
Red Hat JBoss Enterprise Application Platform 8 Versions not published
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 Versions not published
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 Versions not published
Red Hat Build of Keycloak Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat Fuse 7 Versions not published
Red Hat JBoss Data Grid 7 Versions not published
Red Hat JBoss Enterprise Application Platform 6 Versions not published
Show the 4 other branches
Product Affected versions Fixed in
Red Hat JBoss Enterprise Application Platform 7 Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published
Red Hat Single Sign-On 7 Versions not published
Red Hat JBoss Enterprise Application Platform 7.4.16 1.3 earliest → < 1.3.9.SP3-redhat-00001 1.3.9.SP3-redhat-00001

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat JBoss Enterprise Application Platform

The 14 CVEs of Red Hat JBoss Enterprise Application Platform →
CVE-2026-0603 Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 8.3 High CVE-2025-12543 Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 9.6 Critical CVE-2024-3884 Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded High CVE-2025-9784 Undertow: undertow madeyoureset http/2 ddos vulnerability 7.5 High
Track this CVE