CVE-2024-8097CWE-200

Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level

Medium · published September 11, 2024

CVSS v4.0
6.7
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.20.0 before 5.67.0, from 5.2020.2 before 5.2022.5, from 4.1.2.191.0 before 4.1.2.191.50.

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-09-11T16:32Z
EPSS history
Timeline
  • 11 SEP 16:32Z
    Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level
    cvelistv5