CVE catalog

CVE-2019-10212

DEBIAN-CVE-2019-10212

[CVE catalog]

Severity
Medium · CVSS 4.8CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.89% · Oct 25, 2026

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianundertow141.3.11-1vulnerable
Debianundertow141.3.16-1vulnerable
Debianundertow141.3.19-1vulnerable
Debianundertow141.3.21-1vulnerable
Debianundertow141.3.23-1vulnerable
Debianundertow141.3.4-1vulnerable
Debianundertow141.3.5-1vulnerable
Debianundertow141.3.7-1vulnerable
Debianundertow141.4.0-1vulnerable
Debianundertow141.4.1-1vulnerable
Debianundertow141.4.18-1vulnerable
Debianundertow141.4.20-1vulnerable
Debianundertow141.4.21-1vulnerable
Debianundertow141.4.21-2vulnerable
Debianundertow141.4.22-1vulnerable
Debianundertow141.4.23-1vulnerable
Debianundertow141.4.23-2vulnerable
Debianundertow141.4.23-3vulnerable
Debianundertow141.4.25-1vulnerable
Debianundertow141.4.25-2vulnerable
Debianundertow141.4.3-1vulnerable
Debianundertow141.4.4-1vulnerable
Debianundertow141.4.6-1vulnerable
Debianundertow141.4.7-1vulnerable
Debianundertow141.4.8-1vulnerable
Debianundertow142.0.23-1vulnerable
Debianundertow142.0.25-1vulnerable
Debianundertow142.0.26-1vulnerable
Debianundertow142.0.27-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianundertowdeb142.0.27-1Not reportedDEBIAN-CVE-2019-10212Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]