Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2024/06/02 10:28 p.m.•50 views

GHSA-RCVG-JJ3G-RJ7C Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints

The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the application database, and the associated endpoints are no...

6.5CVSS6.4AI score0.00582EPSS
SaveExploits1References4
Rows per page
Query Builder