Threats tagged 'ghsa-xf2f-qhmc-c4c4'

This vulnerability involves the logging of irrelevant properties by an Event Publisher output adapter, which can include sensitive user credentials or confidential information if misconfigured. An attacker with access to the 'wso2carbon' log files could extract this sensitive data, potentially leading to unauthorized access. The issue is due to improper handling of configuration properties in logging.