Lucene search

K
redhatcveRedhat.comRH:CVE-2019-10212
HistorySep 30, 2019 - 7:52 p.m.

CVE-2019-10212

2019-09-3019:52:06
redhat.com
access.redhat.com
17

0.003 Low

EPSS

Percentile

68.4%

A flaw was found in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user’s credentials from the log files.

Mitigation

Use Elytron instead of legacy Security subsystem.