Lucene search
+L

1 matches found

RustSec
RustSec
added 2024/07/23 12:0 p.m.8 views

Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files

Exposure of temporary credentials in logs in Apache Arrow Rust Object Store, version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity. This allows someone with access to the logs t...

7.5CVSS7.3AI score0.0071EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder