{"id":"CVE-2020-25640","aliases":["BIT-wildfly-2020-25640","GHSA-jw3v-5ch2-wfmm"],"url":"https://o3.security/vulnerability/CVE-2020-25640","summary":"Wildfly logs plaintext passwords","details":"A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.","published":"2020-11-24T19:15:10.633Z","modified":"2026-07-08T19:02:46.672508Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.wildfly:wildfly-parent","fixedVersion":"21.0.0.Final"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/amqphub/amqp-10-resource-adapter/issues/13"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20201210-0001/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881637"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T19:02:46.672508Z"}}