Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jboss EAP Credentials Management Errors Vulnerability - CVE-2012-0034 - Vulnerability Database
Jboss EAP

Jboss EAP Credentials Management Errors Vulnerability - CVE-2012-0034

Low
Reference: CVE-2012-0034
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-0034
Title: Jboss EAP Credentials Management Errors Vulnerability
Overview:

The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0 Web Platform (EWP) 5.1.2 and 5.2.0 and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown which allows local users to obtain sensitive information by reading the log file.