CVE-2024-1102

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-1102

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-1102.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2024-1102

Aliases

GHSA-9wmf-xf3h-r8pr

Downstream

RHSA (2)

Published

2024-04-25T16:24:30Z

Modified

2026-10-16T02:52:02Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Jberet: jberet-core logging database credentials

Details

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.

Database specific

{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-523"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1102.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "1.3.9.SP3-redhat-00001"
                        },
                        {
                            "fixed": "0:6.2.2-1.Final_redhat_00001.1.el8eap"
                        },
                        {
                            "fixed": "0:2.1.4-1.Final_redhat_00001.1.el8eap"
                        },
                        {
                            "fixed": "0:6.2.2-1.Final_redhat_00001.1.el9eap"
                        },
                        {
                            "fixed": "0:2.1.4-1.Final_redhat_00001.1.el9eap"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "InverseAffectedRanges"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/jberet/jsr352

Affected ranges

Type

GIT

Repo

https://github.com/jberet/jsr352

Events

Introduced

Fixed

c87e850fab49a5afea04bc750b133c2b53b4f9a0

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "2.2.1"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "cpe": "cpe:2.3:a:jberet:jberet:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "2.2.1"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

1.*

1.0.0.Alpha1

1.0.0.Alpha2

1.0.0.Alpha3

1.0.0.Alpha4

1.0.0.Beta1

1.0.0.Beta2

1.0.0.CR1

1.0.0.CR2

1.0.0.Final

1.0.1.Beta

1.0.1.CR1

1.0.1.CR2

1.0.1.Final

1.0.2.Final

1.1.0.Alpha1

1.1.0.Alpha2

1.1.0.Alpha3

1.1.0.Beta1

1.1.0.Final

1.2.0.Alpha1

1.2.0.Alpha2

1.2.0.Beta1

1.2.0.Final

1.3.0.Alpha1

1.3.0.Beta1

1.3.0.Beta2

1.3.0.Beta3

1.3.0.Beta4

1.3.0.Beta5

1.3.0.Beta6

1.3.0.Beta7

1.3.0.Final

1.4.0.Alpha

1.4.0.Final

1.4.1.Final

1.4.2.Final

1.4.3.Final

2.*

2.0.0.Final

2.0.1.Final

2.0.2.Final

2.0.3.Final

2.0.4.Final

2.0.5.Final

2.1.0.Beta1

2.1.0.Final

2.1.1.Final

2.1.2.Final

2.2.0.Final

Other

list

with-job-inheritance

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-1102.json"