CVE-2023-24619

Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versio...

Redpanda 安全漏洞

Redpanda is a streaming data platform for developers. It is compatible with the Kafka API. A security vulnerability exists in Redpanda versions prior to 22.3.12 that stems from exposing plaintext AWS credentials, which can be exploited by a local attacker to view keys in the console or logs...

CVE-2023-24619

CVE-2023-24619 affects Redpanda prior to 22.3.12. The rpk import feature logs AWS credentials (Access Key ID and Secret) in cleartext to stdout, exposing them locally or in Kubernetes logs. Fixed in 22.3.12, with related patched versions 22.2.10 and 22.1.12. The vulnerability’s impact is plaintex...

CVE-2023-24619

Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versio...