CVE-2024-11193

An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext within application logs. This flaw results in the unintentional exposure of sensitive information in Yugabyte Anywhere logs, potentially allowing unauthorized users with access...

CVE-2024-11193

An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext within application logs. This flaw results in the unintentional exposure of sensitive information in Yugabyte Anywhere logs, potentially allowing unauthorized users with access...

CVE-2024-11193

The CVE-2024-11193 issue concerns Yugabyte Anywhere where the LDAP bind password is logged in plaintext in application logs, exposing sensitive credentials to anyone with log access. Affected Yugabyte Anywhere versions are 2.20.0.0–2.20.6.0, 2.23.0.0, and 2024.1.0.0–2024.1.2.0. Root cause: creden...