Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2015-1849

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.

Published: Sep 19, 2017
Updated: Nov 9, 2025
CVE: CVE-2015-1849
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
redhat / jboss_enterprise_application_platform	-	6.4.0.x

https://bugzilla.redhat.com/show_bug.cgi?id=1199641
https://bugzilla.redhat.com/show_bug.cgi?id=1208580
https://github.com/wildfly-security/jboss-negotiation/commit/0dc9d191b6eb1d13b8f0189c5b02ba6576f4722e
https://github.com/wildfly-security/jboss-negotiation/pull/21

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo