NetSight
medium6.7

CVE-2024-8097

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted…

Impact

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.20.0 before 5.67.0, from 5.2020.2 before 5.2022.5, from 4.1.2.191.0 before 4.1.2.191.50.

Affected products

VendorProductAffected versions
PayaraPayara Server: From 6.0.0
before 6.18.0
From 6.2022.1
before 6.2024.9
From 5.20.0
before 5.67.0
From 5.2020.2
before 5.2022.5
From 4.1.2.191.0
before 4.1.2.191.50.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References