5.3
Moyenne
CVE-2019-3888 A vulnerability was found in Undertow web server before 2.0.21
Description
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| undertow | 2.0.21 | Pas de correctif indiqué |
Autres CVE de undertow
Les 7 CVE de undertow →
CVE-2020-10719
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with…
6.5
Moyenne
CVE-2020-1757
A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and…
8.1
Élevée
CVE-2019-14888
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS
7.5
Élevée
CVE-2018-14642
An information leak vulnerability was found in Undertow
5.3
Moyenne