CVE Reference: CVE-2012-0034

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2012-0034

Description:
The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file.

CVE Status:
Candidate

References:

SAID
  Secunia Advisory: SA51984
  Secunia Advisory: SA52054

REDHAT
  http://rhn.redhat.com/errata/RHSA-2013-0221.html
  http://rhn.redhat.com/errata/RHSA-2013-0197.html
  http://rhn.redhat.com/errata/RHSA-2013-0196.html
  http://rhn.redhat.com/errata/RHSA-2013-0195.html
  http://rhn.redhat.com/errata/RHSA-2013-0193.html
  http://rhn.redhat.com/errata/RHSA-2013-0192.html
  http://rhn.redhat.com/errata/RHSA-2013-0191.html
  http://rhn.redhat.com/errata/RHSA-2012-1072.html
  http://rhn.redhat.com/errata/RHSA-2012-0108.html
  http://rhn.redhat.com/errata/RHSA-2013-0533.html

OSVDB
  78259

MISC

CONFIRM

BID
  51392


Return to the previous page.