PT-2024-16708 · Unknown · Jberet-Core

Dascheid · Published 2024-01-31 · Updated 2025-06-18 · CVE-2024-1102

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions jberet-core (affected versions not specified)

Description A vulnerability was found in jberet-core logging. An exception in dbProperties might display user credentials such as the username and password for the database-connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Insertion into Log File

Weakness Enumeration

CWE-523

CWE-200

CWE-532

Related Identifiers

CVE-2024-1102

GHSA-9WMF-XF3H-R8PR

RHSA-2024:3580

RHSA-2024:3581

Affected Products

Jberet-Core

References · 17

• 🔥 https://github.com/jberet/jsr352/issues/452 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-1102 · Security Note
• https://access.redhat.com/errata/RHSA-2024:1677 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:3581 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:3583 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:3580 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-1102 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9wmf-xf3h-r8pr · Vendor Advisory
• https://github.com/jberet/jsr352 · Note
• https://github.com/jberet/jsr352/commit/eeef999663d7da0e372aeeeac26ecf7201a3121d · Note
• https://twitter.com/VulmonFeeds/status/1752681738633924795 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2024-1102 · Note
• https://t.me/cvenotify/98295 · Telegram Post
• https://t.me/cvenotify/78045 · Telegram Post
• https://t.me/cvenotify/81972 · Telegram Post