CVE-2024-8097

published 2024-09-11

CVE-2024-8097: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted…

Priority P4 22 medium 6.7 CVSS 4.0

AV L AC L AT N PR H UI A VC H VI N VA N SC H SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modules) allows Sensitive credentials posted in plain-text on the server log.This issue affects Payara Server: from 6.0.0 before 6.18.0, from 6.2022.1 before 6.2024.9, from 5.20.0 before 5.67.0, from 5.2020.2 before 5.2022.5, from 4.1.2.191.0 before 4.1.2.191.50.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
payara_platform	payara_server	>= 4.1.2.191.0 < 4.1.2.191.50	4.1.2.191.50
payara_platform	payara_server	>= 5.20.0 < 5.67.0	5.67.0
payara_platform	payara_server	>= 5.2020.2 < 5.2022.5	5.2022.5
payara_platform	payara_server	>= 6.0.0 < 6.18.0	6.18.0
payara_platform	payara_server	>= 6.2022.1 < 6.2024.9	6.2024.9

CVSS provenance

nvd v4.0 6.7 MEDIUM CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vendor_redhat 6.7 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200