GHSA-jw3v-5ch2-wfmm

Suggest an improvement
Source
https://github.com/advisories/GHSA-jw3v-5ch2-wfmm
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-jw3v-5ch2-wfmm/GHSA-jw3v-5ch2-wfmm.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-jw3v-5ch2-wfmm
Aliases
Published
2022-02-15T01:38:27Z
Modified
2024-02-22T05:16:44.532552Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Wildfly logs plaintext passwords
Details

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

References

Affected packages

Maven / org.wildfly:wildfly-parent

Package

Name
org.wildfly:wildfly-parent
View open source insights on deps.dev
Purl
pkg:maven/org.wildfly/wildfly-parent

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
21.0.0.Final

Affected versions

8.*

8.0.0.Alpha1
8.0.0.Alpha2
8.0.0.Alpha3
8.0.0.Alpha4
8.0.0.Beta1
8.0.0.CR1
8.0.0.Final
8.1.0.CR1
8.1.0.CR2
8.1.0.Final
8.2.0.Final
8.2.1.Final

9.*

9.0.0.Alpha1
9.0.0.Beta1
9.0.0.Beta2
9.0.0.CR1
9.0.0.CR2
9.0.0.Final
9.0.1.Final
9.0.2.Final

10.*

10.0.0.Alpha1
10.0.0.Alpha2
10.0.0.Alpha3
10.0.0.Alpha4
10.0.0.Alpha5
10.0.0.Alpha6
10.0.0.Beta1
10.0.0.Beta2
10.0.0.CR1
10.0.0.CR2
10.0.0.CR3
10.0.0.CR4
10.0.0.CR5
10.0.0.Final
10.1.0.CR1
10.1.0.Final

11.*

11.0.0.Alpha1
11.0.0.Beta1
11.0.0.CR1
11.0.0.Final

12.*

12.0.0.Beta1
12.0.0.CR1
12.0.0.Final

13.*

13.0.0.Beta1
13.0.0.Final

14.*

14.0.0.Beta1
14.0.0.Beta2
14.0.0.Final
14.0.1.Final

15.*

15.0.0.Beta1
15.0.0.Final
15.0.1.Final

16.*

16.0.0.Beta1
16.0.0.Final

17.*

17.0.0.Alpha1
17.0.0.Beta1
17.0.0.Final
17.0.1.Final

18.*

18.0.0.Beta1
18.0.0.Final
18.0.1.Final

19.*

19.0.0.Beta1
19.0.0.Beta2
19.0.0.Beta3
19.0.0.Final
19.1.0.Final

20.*

20.0.0.Beta1
20.0.0.Final
20.0.1.Final

21.*

21.0.0.Beta1