29 matches found
Insertion Of Sensitive Information Into Log File
github.com/juanfont/headscale is vulnerable to Insertion Of Sensitive Information Into Log File. The vulnerability is due the HTTP api writting the whole bearer token to info-level logs...
GHSA-WP76-CF2J-RQQ7 Headscale writes bearer tokens to info-level logs
Headscale through 0.22.3 writes bearer tokens to info-level logs...
Design/Logic Flaw
Headscale through 0.22.3 writes bearer tokens to info-level logs...
CVE-2023-47390
Headscale through 0.22.3 writes bearer tokens to info-level logs...
CVE-2023-47390
Headscale up to 0.22.3 stores bearer tokens in info‑level logs via the HTTP API, exposing credentials in logs. Multiple connected sources corroborate that tokens are written to logs when accessing the API, with the root cause described as logging sensitive data. Affected: Headscale; component: HT...
CVE-2023-47390
Headscale through 0.22.3 writes bearer tokens to info-level logs...
CVE-2023-46653
Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure...
Cross site request forgery (csrf)
Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure...