CVE-2012-0034: Credentials Management

February 5, 2013 (updated January 17, 2015)

The NonManagedConnectionFactory in JBoss logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file.

Code Behaviors & Features

Detect and mitigate CVE-2012-0034 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →