CVE-2019-3888

EPSS 3.03%
Veröffentlicht 12.06.2019 14:29:04
Zuletzt bearbeitet 21.11.2024 04:42:48
Erkennungen
Login

A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 9

NVD 8 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Undertow Version < 2.0.21

Redhat ≫ Virtualization Version 4.0

Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Virtualization Host Version 4.0

Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Jboss Data Grid Version - SwEdition text-only

Redhat ≫ Openshift Application Runtimes Version - SwEdition text-only

Netapp ≫ Active Iq Unified Manager Version - SwPlatform linux

Netapp ≫ Active Iq Unified Manager Version - SwPlatform vmware_vsphere

Netapp ≫ Active Iq Unified Manager Version - SwPlatform windows

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.03%	0.862

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat	5.3	1.6	3.6	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N