CVE-2014-0085

JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text: Apache Zookeeper logs cleartext admin passwords, which allows local users to obtain sensitive information by reading the log.

• CWE-255

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0085Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0085Issue Tracking, Third Party Advisory

Published

Apr 17, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0079The ValidateUserLogon function in provider/libserver/ECSessi…
• CVE-2014-0080SQL injection vulnerability in activerecord/lib/active_recor…
• CVE-2014-0081Multiple cross-site scripting (XSS) vulnerabilities in actio…
• CVE-2014-0082actionpack/lib/action_view/template/text.rb in Action View i…
• CVE-2014-0083The Ruby net-ldap gem before 0.11 uses a weak salt when gene…5.5
• CVE-2014-0084Ruby gem openshift-origin-node before 2014-02-14 does not co…5.5
• CVE-2014-0086The doFilter function in webapp/PushHandlerFilter.java in JB…
• CVE-2014-0087The check_privileges method in vmdb/app/controllers/applicat…
• CVE-2014-0088The SPDY implementation in the ngx_http_spdy_module module i…
• CVE-2014-0089Cross-site scripting (XSS) vulnerability in app/views/common…
• CVE-2014-0090Session fixation vulnerability in Foreman before 1.4.2 allow…
• CVE-2014-0091Foreman has improper input validation which could lead to pa…5.3