Summary

Some Java-based web applications may leak user data when handling user login attempts. This is due to a configuration issue that can allow unauthorized access to sensitive information. To fix this, update your application's configuration settings to ensure rejected login attempts are properly handled and do not expose user data.