CVE-2021-34797CWE-532

Apache Geode project log file redaction of sensitive information vulnerability

published January 4, 2022

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable to a log file redaction of sensitive information flaw when using values that begin with characters other than letters or numbers for passwords and security properties with the prefix "sysprop-", "javax.net.ssl", or "security-". This issue is fixed by overhauling the log file redaction in Apache Geode versions 1.12.5, 1.13.5, and 1.14.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02514 · 84.7th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2022-01-04T08:55Z
EPSS history
Timeline
  • 04 JAN 08:55Z
    Apache Geode project log file redaction of sensitive information vulnerability
    cvelistv5