CVE-2019-14885

4.3 mediumEPSS 0.7%

Medium (4.3) in redhat. EPSS 0.7% chance of exploitation in the next 30 days.

A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2020-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:jboss_enterprise_application_platform
redhat:single_sign-on

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14885
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14885

Check your stack JSON