CVE-2024-1102: Jberet: jberet-core logging database credentials

Description

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jberet

Default version status: unaffected

0 to < 2.2.1affected

Red Hat Red Hat JBoss Enterprise Application Platform 7.4.16

Default version status: affected

1.3.9.SP3-redhat-00001 to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

0:6.2.2-1.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

0:2.1.4-1.Final_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

0:6.2.2-1.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

0:2.1.4-1.Final_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat Build of Keycloak

Default version status: unaffected