What the vulnerability does
01Description
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.
CVSS base score
4.8/10
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
Key dates
02Disclosure timeline
October 2, 2019
CVE published
August 4, 2024
Record updated
External resources
