critical9.8
CVE-2019-10212
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security.
Impact
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Undertow | before 2.0.20 |
| Redhat | Jboss Data Grid | from 7.0.0 through 7.3 All versions |
| Redhat | Jboss Enterprise Application Platform | All versions Versions 7.2, 7.3, 7.4 |
| Redhat | Jboss Fuse | from 7.0.0 through 7.4 |
| Redhat | Openshift Application Runtimes | All versions |
| Redhat | Single Sign-On | from 7.0 through 7.3 |
| Netapp | Active Iq Unified Manager | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2019:2998
- https://access.redhat.com/errata/RHSA-2020:0727
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10212
- https://security.netapp.com/advisory/ntap-20220210-0017/
- https://access.redhat.com/errata/RHSA-2019:2998
- https://access.redhat.com/errata/RHSA-2020:0727
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10212
- https://security.netapp.com/advisory/ntap-20220210-0017/