CVEvulnerability
CVE-2015-1849
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.
Affected configurations
• redhat jboss enterprise application platform (<= 6.4.0)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1199641 Exploit, Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1208580 Issue Tracking, Third Party Advisory
- https://github.com/wildfly-security/jboss-negotiation/commit/0dc9d191b6eb1d13b8f0189c5b02ba6576f4722e Third Party Advisory
- https://github.com/wildfly-security/jboss-negotiation/pull/21 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1199641 Exploit, Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1208580 Issue Tracking, Third Party Advisory
- https://github.com/wildfly-security/jboss-negotiation/commit/0dc9d191b6eb1d13b8f0189c5b02ba6576f4722e Third Party Advisory
- https://github.com/wildfly-security/jboss-negotiation/pull/21 Third Party Advisory