7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
37.3%
journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0.
CPE | Name | Operator | Version |
---|---|---|---|
aiven:journalpump | aiven journalpump | lt | 2.5.0 |
[
{
"vendor": "Aiven-Open",
"product": "journalpump",
"versions": [
{
"version": "< 2.5.0",
"status": "affected"
}
]
}
]