CVE-2012-0034: redhat jboss_enterprise_application_platform Credentials Management Errors
Vulnerability summary
CVE-2012-0034 is a low (CVSS 2.1) Credentials Management Errors vulnerability in redhat jboss_enterprise_application_platform. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 6Timeline
- 05-02-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
33%
Versus all other CVEs
30-day change
0.00 pp
From 0.40% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat3 products
- jboss_enterprise_application_platform5.1.2 | 5.2.0
- jboss_enterprise_brms_platform≤ 5.3.0
- jboss_enterprise_web_platform5.1.2 | 5.2.0
1 vendor · 3 products
References
16 links- bugzilla.redhat.com/show_bug.cgi?id=772835X Refsource MISC
- issues.jboss.org/browse/JBCACHE-1612X Refsource CONFIRM