Lucene search
+L

5 matches found

CNNVD
CNNVD
•added 2024/07/11 12:00 a.m.•18 views

Number withdrawn

Bootstrap is an open source web front-end framework developed using HTML, CSS, and JavaScript by Bootstrap. ch is a ClickHouse open source low-level Go client for ClickHouse. This CVE number has been withdrawn...

6.9AI score
SaveExploits0References3
CVE
CVE
•added 2024/01/19 9:02 p.m.•112 views

CVE-2024-23689

Summary: CVE-2024-23689 affects ClickHouse Java libraries (clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, com.clickhouse:clickhouse-client) with versions

8.8CVSS7.3AI score0.00676EPSS
SaveExploits1References6Affected Software1
Mend
Mend
•added 2024/01/19 9:02 p.m.•6 views

CVE-2024-23689

Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when...

8.8CVSS0.00676EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/19 12:00 a.m.•4 views

CVE-2024-23689: Generation of Error Message Containing Sensitive Information

Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when...

8.8CVSS7.1AI score0.00676EPSS
SaveExploits1References10
Veracode
Veracode
•added 2023/05/16 2:48 a.m.•21 views

Password Disclosure

clickhouse-client is vulnerable to Password Disclosure. The vulnerability exists when client certificate authentication is enabled with password protection in the library, leading to password disclosure in client exception messages, such as the handling of ClickHouseException or SQLException...

7.1AI score
SaveExploits0
Rows per page
Query Builder