Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
•added 2023/10/19 6:22 p.m.•20 views

CVE-2023-45825 Token in custom credentials object can leak through logs in ydb-go-sdk

ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object implementation of interface Credentials it may leak into logs. This happens because this object could be serialized into an error message using...

5.5CVSS6.1AI score0.00219EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/10/19 6:22 p.m.•72 views

CVE-2023-45825 Token in custom credentials object can leak through logs in ydb-go-sdk

ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object implementation of interface Credentials it may leak into logs. This happens because this object could be serialized into an error message using...

5.5CVSS5.4AI score0.00219EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•1 views

CVE-2023-45825: Insertion of Sensitive Information into Log File

ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object implementation of interface Credentials it may leak into logs. This happens because this object could be serialized into an error message using...

5.5CVSS5.7AI score0.00219EPSS
SaveExploits0References3
Rows per page
Query Builder