CVEvulnerability

CVE-2012-0034

2.1 LOW Published 2013-02-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-255

Description

The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file.

Affected configurations

• redhat jboss enterprise application platform 5.1.2 • redhat jboss enterprise application platform 5.2.0 • redhat jboss enterprise web platform 5.1.2 • redhat jboss enterprise web platform 5.2.0 • redhat jboss enterprise brms platform (<= 5.3.0)

Related

Weakness · not in database (1)

References