CVE-2021-34797

Katalog CVE

CVSS 7.5 · High EPSS 2,5%

Kerentanan Insertion of Sensitive Information into Log File pada apache geode. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable to a log file redaction of sensitive information flaw when using values that begin with characters other than letters or numbers for passwords and security properties with the prefix "sysprop-", "javax.net.ssl", or "security-". This issue is fixed by overhauling the log file redaction in Apache Geode versions 1.12.5, 1.13.5, and 1.14.0.

Rincian

Terbit di NVD

4 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

2,5% peluang dieksploitasi; lebih tinggi dari 84,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/nq2w9gjzm1cjx1rh6zw41ty39qw7qpx4 mailing list · advisory vendor
• https://lists.apache.org/thread/p4l0g49rzzzpn8yt9q9p0xp52h3zmsmk mailing list · advisory vendor