1 matches found
CVE-2023-30610: Insertion of Sensitive Information into Log File
aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...
5.5CVSS5.7AI score0.00214EPSS
SaveExploits0References3
20