Lucene search

GoogleOSV:GHSA-M757-P8RV-4Q93

HistoryMar 06, 2024 - 3:31 p.m.

Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

2024-03-0615:31:04

Google

osv.dev

apache linkis

datasource

oracle

sql

database

password

leak

log

upgrade

version 1.5.0

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.
We recommend users upgrade the version of Linkis to version 1.5.0

References

www.openwall.com/lists/oss-security/2024/03/06/2

github.com/apache/linkis

github.com/apache/linkis/commit/08cbcfca140afebae10e1582ee87721578719ded

lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo

nvd.nist.gov/vuln/detail/CVE-2023-50740