GitHub Advisoryadvisory · Maven

GHSA-9wmf-xf3h-r8pr Jberet: jberet-core logging database credentials

MEDIUM Published 2024-04-25 Modified 2025-10-24 Official page ↗
Aliases
CVE-2024-1102
Ecosystem
Maven
Packages
org.jberet:jberet-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200, CWE-523, CWE-532
Reviewed
2024-04-25

Affected packages

• Maven org.jberet:jberet-core: < 2.2.1.Final → fixed in 2.2.1.Final

Description

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.

Related

Alias · CVE (1)

  • CVE-2024-1102 A vulnerability was found in jberet-core logging. vulnerability

Weakness · CWE (3)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-523 Unprotected Transport of Credentials weakness
  • CWE-532 Insertion of Sensitive Information into Log File weakness

References