Security Flaw in Undertow's Logging Mechanism Exposes User Credentials
CVE-2019-10212

4.8MEDIUM

Key Information:

Vendor

Red Hat
Status
Undertow
Vendor
CVE Published:
2 October 2019

What is CVE-2019-10212?

A vulnerability exists in Undertow prior to version 2.0.20, where an improperly secured DEBUG log can inadvertently expose user credentials. If the DEBUG logging is enabled, attackers can exploit this flaw to access sensitive information stored in the log files, potentially leading to unauthorized access or data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

undertow all under 2.0.20

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10212
x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:2998
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0727
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

CVSS V3.0

Score:
4.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.