medium6.7
CVE-2024-8097
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted…
Impact
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.20.0 before 5.67.0, from 5.2020.2 before 5.2022.5, from 4.1.2.191.0 before 4.1.2.191.50.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Payara | Payara Server: From 6.0.0 | before 6.18.0 |
| From 6.2022.1 | before 6.2024.9 | |
| From 5.20.0 | before 5.67.0 | |
| From 5.2020.2 | before 5.2022.5 | |
| From 4.1.2.191.0 | before 4.1.2.191.50. |
Versions were read from the advisory text. No structured product data has been published for this record yet.