CVE-2020-25640

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

Score

CVSS 3.1 5.3 Medium

Status

Modified - secalert@redhat.com

Published

2020-11-24

Last modified

2024-08-04

Weaknesses

CWE-209, CWE-532

Affected products

• Wildfly (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1881637
• https://github.com/amqphub/amqp-10-resource-adapter/issues/13
• https://security.netapp.com/advisory/ntap-20201210-0001/