CVE-2023-46742

creationtimestamp| type| source ---|---|--- 2024-01-03 18:31:50+00:00| seen| https://t.me/ctinow/162521 2024-01-04 01:36:53+00:00| seen| https://t.me/cibsecurity/74332 2024-01-05 12:16:29+00:00| seen| https://t.me/arpsyndicate/2471 2024-01-23 20:27:01+00:00| seen| https://t.me/ctinow/172275...

CVE-2023-46742

CubeFS (before v3.3.1) leaks users’ secret keys and access keys in logs across multiple components, including during new user creation. This constitutes information disclosure and potentially enables log-access attackers to impersonate users. The issue is mitigated only by upgrading to v3.3.1, pe...