Lucene search

DebianCVELIST:CVE-2017-0361

HistoryApr 06, 2017 - 12:00 a.m.

CVE-2017-0361 api.log contains passwords in plaintext

2017-04-0600:00:00

debian

www.cve.org

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

JSON

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext.

CNA Affected

[
  {
    "product": "mediawiki",
    "vendor": "mediawiki",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

www.securitytracker.com/id/1039812

lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html

phabricator.wikimedia.org/T125177

security-tracker.debian.org/tracker/CVE-2017-0361