Lucene search
GitHub Advisory DatabaseGHSA-55VQ-XPJF-R2XCHistoryApr 27, 2023 - 9:30 p.m.
Lightbend Alpakka Kafka logs credentials on debug level
2023-04-2721:30:26
CWE-312
CWE-532
GitHub Advisory Database
github.com
44
0.0004 Low
EPSS
Percentile
8.3%
Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.typesafe.akka:akka-stream-kafka | lt | 4.0.2 |
Related
prion
prion
Design/Logic Flaw
2023-04-27 21:15:00
veracode
veracode
Password Disclosure
2023-05-04 02:21:19
osv
osv
Lightbend Alpakka Kafka logs credentials on debug level
2023-04-27 21:30:26
CVE-2023-29471
2023-04-27 21:15:10
cvelist
cvelist
CVE-2023-29471
2023-04-27 00:00:00
cve
cve
CVE-2023-29471
2023-04-27 21:15:10
