mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-27 10:22:48 +02:00
779 B
779 B
CVE-2019-3888
Description
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)
POC
Reference
Github
No PoCs found on GitHub currently.