CVE-2019-14885 MEDIUM

CVE-2019-14885

Vendor Red Hat
Product JBoss EAP
Weakness CWE-532 · Sensitive info in logs
Published January 23, 2020
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.

Key dates

02Disclosure timeline

January 23, 2020 CVE published
August 5, 2024 Record updated