| Package | Affected versions | Patched versions |
|---|---|---|
| io.undertow:undertow-core | < 2.0.21 | 2.0.21 |
| undertow | < 2.0.21 | 2.0.21 |
| virtualization | = 4.0 | |
| virtualization host | = 4.0 |
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free