Lucene search
+L

1 matches found

OSV
OSV
added 2023/04/19 12:0 p.m.6 views

RUSTSEC-2023-0125 Logs AWS credentials when TRACE-level logging is enabled

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...

5.5CVSS5.8AI score0.00216EPSS
SaveExploits0References3
Rows per page
Query Builder