Lucene search

GitHub Advisory DatabaseGHSA-M757-P8RV-4Q93

HistoryMar 06, 2024 - 3:31 p.m.

Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

2024-03-0615:31:04

CWE-532

GitHub Advisory Database

github.com

apache linkis

datasource

oracle

sql

database

password

logged

upgrade

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.
We recommend users upgrade the version of Linkis to version 1.5.0

Affected configurations

Vulners

Node

org.apache.linkis\Matchlinkis

CPENameOperatorVersion
org.apache.linkis:linkislt1.5.0

CPE	Name	Operator	Version
	org.apache.linkis:linkis	lt	1.5.0

References

www.openwall.com/lists/oss-security/2024/03/06/2

github.com/advisories/GHSA-m757-p8rv-4q93

github.com/apache/linkis/commit/08cbcfca140afebae10e1582ee87721578719ded

lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo

nvd.nist.gov/vuln/detail/CVE-2023-50740