VDB

DEBIAN-CVE-2019-10212

DEBIAN-CVE-2019-10212 PUBLISHED CVSS 9.800000190734863 CRITICAL

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:14undertow0, 1.3.11-1, 1.3.16-1

Timeline

  • Oct 2, 2019 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›