Undertow Insertion of Sensitive Information into Log File Vulnerability - CVE-2019-10212 - Vulnerability Database

Undertow Insertion of Sensitive Information into Log File Vulnerability - CVE-2019-10212

Critical

Reference: CVE-2019-10212

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-10212

Title: Undertow Insertion of Sensitive Information into Log File Vulnerability

Overview:

A flaw was found in all under 2.0.20 in the Undertow DEBUG log for io.undertow.request.security. If enabled an attacker could abuse this flaw to obtain the user39s credentials from the log files.