CVE-2012-0034

CVE-2012-0034 describes a cleartext logging vulnerability in JBoss Enterprise Application Platform (EAP) 5.1.2/5.2.0, Web Platform (EWP) 5.1.2/5.2.0, and BRMS Platform before 5.3.1. When an exception occurs, the NonManagedConnectionFactory logs usernames and passwords in cleartext, allowing local users to access sensitive information by reading log files. The vulnerability has a low severity CVSS score (2.1), indicating local access with low attack complexity and a potential impact of confidentiality compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.