2 matches found
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the sdk/trace.NewTracerProvider. An attacker can obtain sensitive information by accessing info-level diagnostic logs that may include internal collector endpoints and credentials embedded in URLs. Note: This ...
2.5CVSS5.8AI score0.00195EPSS
SaveExploits0References2
20