CVE-2019-10212

Name of the Vulnerable Software and Affected Versions Undertow versions prior to 2.0.20

Description A flaw was found in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files. The vulnerability is related to the disclosure of information through log files and can be exploited by a remote attacker.

Recommendations For versions prior to 2.0.20, consider disabling the DEBUG log for io.undertow.request.security to prevent the disclosure of user credentials. At the moment, there is no information about a newer version that contains a fix for this vulnerability.