Riskcovery

CVE-2021-34797

Apache Geode project log file redaction of sensitive information vulnerability

State
Published
Severity
Not scored
Published
Jan 4, 2022
Updated
Aug 4, 2024
Reserved
Jun 15, 2021

Read the record on cve.org

Description

Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable to a log file redaction of sensitive information flaw when using values that begin with characters other than letters or numbers for passwords and security properties with the prefix "sysprop-", "javax.net.ssl", or "security-". This issue is fixed by overhauling the log file redaction in Apache Geode versions 1.12.5, 1.13.5, and 1.14.0.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-532 Insertion of Sensitive Information into Log File

Affected Products

ProductVersions
Apache GeodeApache Software Foundation
  • Apache Geode through 1.12.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.