CVE-2024-1102

Published: Apr 25, 2024

Modified: Nov 11, 2025

PUBLISHED

CVSS v3.1

6.5

MEDIUM

Description

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.

Vendor	Product	Versions
Unknown	jberet	affected `0 - < 2.2.1`
Red Hat	Red Hat JBoss Enterprise Application Platform	unaffected `1.3.9.SP3-redhat-00001 - < *`
Red Hat	Red Hat JBoss Enterprise Application Platform 8	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	unaffected `0:6.2.2-1.Final_redhat_00001.1.el8eap - < *`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8	unaffected `0:2.1.4-1.Final_redhat_00001.1.el8eap - < *`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	unaffected `0:6.2.2-1.Final_redhat_00001.1.el9eap - < *`
Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9	unaffected `0:2.1.4-1.Final_redhat_00001.1.el9eap - < *`
Red Hat	Red Hat Build of Keycloak	All versions
Red Hat	Red Hat Data Grid 8	All versions
Red Hat	Red Hat Fuse 7	All versions
Red Hat	Red Hat JBoss Data Grid 7	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 6	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 7	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	All versions
Red Hat	Red Hat Single Sign-On 7	All versions