CVE-2024-8097: falha de média gravidade em Payara Server
Sensitive information exposure when the org.glassfish.admingui LOGGER is set to FINEST level
Publicada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.7epss 0.2%
probabilidade de exploração
0.2%top 92% das CVEs
exploração observada
nãonenhuma fonte reporta
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.20.0 before 5.67.0, from 5.2020.2 before 5.2022.5, from 4.1.2.191.0 before 4.1.2.191.50.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Produtos afetados
Payara Platform · Payara ServerCVEs relacionadas — Payara Server
No mesmo produto, das mais perigosas para as menos.
CVE-2025-14340HIGHAdmin Account Takeover via malicious URL payloadEPSS 1.0%CVE-2024-8215HIGHPayload Injection Attack via Management REST interfaceEPSS 0.5%CVE-2025-1534MEDIUMCross-site Scripting (Stored)EPSS 0.3%CVE-2024-45687LOWHTTP Server incorrectly accepting disallowed characters within header valuesEPSS 0.2%CVE-2024-7312HIGHREST Interface Link Redirection via Host parameterEPSS 0.2%