CVE-2020-25640 - AskarLabs CVE Database

CVE-2020-25640

Vendor N/A

Product wildfly

Weakness CWE-209 · Error message info leak

Published November 24, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

Key dates

02Disclosure timeline

November 24, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-25640 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/209.html

Related vulnerabilities

04Related CVE

CVE-2025-40760 CVE-2025-2239 Absolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall CVE-2022-22162 Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in CVE-2021-33711 CVE-2023-3362 Generation of Error Message Containing Sensitive Information in GitLab