Lucene search
+L

1 matches found

OSV
OSV
added 2024/07/23 12:0 p.m.14 views

RUSTSEC-2024-0358 Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files

Exposure of temporary credentials in logs in Apache Arrow Rust Object Store, version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity. This allows someone with access to the logs t...

3.8CVSS7.6AI score0.0071EPSS
SaveExploits0References4
Rows per page
Query Builder