Back

MEDIUM

EAP: LDAP bind password is being logged with TRACE log level

Published Sep 19, 2017

Description

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (7)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Sep 19, 2017
Updated Aug 6, 2024
Reserved Feb 17, 2015
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Low
Public date Mar 23, 2015