Code injection

2023-04-2403:15:00

PRIOn knowledge base

www.prio-n.com

code injection

password exposure

cloverdx

audit log

security update

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

JSON

CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employed. The fixed versions are 5.15.4, 5.16.2, 5.17.3, and 6.0.x.

CPENameOperatorVersion
cloverdxge5.14.0
cloverdxle5.14.3
cloverdxeq5.16.1
cloverdxeq5.16.0
cloverdxge5.15.0
cloverdxle5.15.3
cloverdxge5.17.0
cloverdxlt5.17.3