Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/01/16 3:48 p.m.•23 views

RustFS's RPC signature verification logs shared secret

Summary Invalid RPC signatures cause the server to log the shared HMAC secret and expected signature, which exposes the secret to log readers and enables forged RPC calls. Details In crates/ecstore/src/rpc/httpauth.rs:115-122 , the invalid signature branch logs sensitive data: rs if signature !=...

7.5CVSS6.1AI score0.00532EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder