CVE-2023-23591

2023-04-1200:00:00

mitre

www.cve.org

logback

terminalfour

sensitive information

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1.

References

docs.terminalfour.com/articles/release-notes-highlights/

docs.terminalfour.com/release-notes/83/15.html