← volver
CVE-2024-0006

DB User Password Leak in Application Log

CVSS 5.4 MEDIUMEPSS 0.3%CWE-532
Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access.
CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →