Information Disclosure

2019-01-1509:03:38

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.6%

JSON

jboss-ec2-eap is vulnerable to information disclosure attacks. The vulnerability exists as AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.

CPENameOperatorVersion
jboss-ec2-eapeq7.4.3__1.Final_redhat_2.ep6.el6
jboss-ec2-eapeq7.4.0__21.Final_redhat_19.ep6.el6
jboss-ec2-eapeq7.3.4__1.Final_redhat_1.ep6.el6
jboss-ec2-eapeq7.3.0__14.Final_redhat_14.ep6.el6
jboss-ec2-eapeq7.3.2__2.Final_redhat_2.ep6.el6
jboss-ec2-eapeq5.1.2__8.11.ep5.el6
jboss-ec2-eapeq7.2.1__1.Final_redhat_10.ep6.el6
jboss-ec2-eapeq7.3.1__3.Final_redhat_3.ep6.el6
jboss-ec2-eapeq7.5.0__9.Final_redhat_21.ep6.el6
jboss-ec2-eapeq7.2.0__8.Final_redhat_8.ep6.el6

Name	Operator	Version
jboss-ec2-eap	eq	7.4.3__1.Final_redhat_2.ep6.el6
jboss-ec2-eap	eq	7.4.0__21.Final_redhat_19.ep6.el6
jboss-ec2-eap	eq	7.3.4__1.Final_redhat_1.ep6.el6
jboss-ec2-eap	eq	7.3.0__14.Final_redhat_14.ep6.el6
jboss-ec2-eap	eq	7.3.2__2.Final_redhat_2.ep6.el6
jboss-ec2-eap	eq	5.1.2__8.11.ep5.el6
jboss-ec2-eap	eq	7.2.1__1.Final_redhat_10.ep6.el6
jboss-ec2-eap	eq	7.3.1__3.Final_redhat_3.ep6.el6
jboss-ec2-eap	eq	7.5.0__9.Final_redhat_21.ep6.el6
jboss-ec2-eap	eq	7.2.0__8.Final_redhat_8.ep6.el6