CVE-2020-25640
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, insert...
Original description
The description as published by the source.
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
wildfly
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"21.0.0"}]}]
References
- advisory bugzilla.redhat.com
- advisory github.com
- advisory security.netapp.com
- web nvd.nist.gov