CVE-2023-50740
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. We recommend users upgrade the version of Linkis to version 1.5.0
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache Linkis DataSource | * < 1.5.0 | affected |
Weaknesses
- CWE-532: CWE-532 Insertion of Sensitive Information into Log File
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
- https://lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo
- http://www.openwall.com/lists/oss-security/2024/03/06/2
References
- https://lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo
- http://www.openwall.com/lists/oss-security/2024/03/06/2
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.