Lucene search
+L

4 matches found

OSV
OSV
•added 2024/07/23 6:31 p.m.•25 views

GHSA-C2HF-VCMR-QJRF Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files

Exposure of temporary credentials in logs in Apache Arrow Rust Object Store objectstore crate, version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity...

4.8CVSS7.6AI score0.0071EPSS
SaveExploits0References7
Rows per page
Query Builder