Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/01/16 3:48 p.m.14 views

RustFS's RPC signature verification logs shared secret

Summary Invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. Details In crates/ecstore/src/rpc/httpauth.rs:115-122 , the invalid signature branch logs sensitive data: rs if signature !=...

7.5CVSS6.7AI score0.00472EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder