VULNERABILITY INTELLIGENCE

CVE-2019-10212

CVSS score9.8 CRITICAL

EPSS probability1.89%

CISA KEVNot currently listed

Published2019-10-02

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

Weakness classification

secalert@redhat.com: CWE-532
nvd@nist.gov: CWE-532

Primary references

secalert@redhat.com — Vendor Advisory
secalert@redhat.com — Vendor Advisory
secalert@redhat.com — Issue Tracking, Mitigation, Vendor Advisory
secalert@redhat.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory