Medium severity5.9NVD Advisory· Published Sep 19, 2017· Updated Jun 17, 2026
CVE-2015-1849
CVE-2015-1849
Description
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*range: <=6.4.0
- (no CPE)range: <6.4.1
Patches
Vulnerability mechanics
References
4- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- github.com/wildfly-security/jboss-negotiation/commit/0dc9d191b6eb1d13b8f0189c5b02ba6576f4722envdThird Party Advisory
- github.com/wildfly-security/jboss-negotiation/pull/21nvdThird Party Advisory
News mentions
0No linked articles in our index yet.