Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2019/12/06 8:0 p.m.45 views

CVE-2019-11293 UAA logs all query parameters with debug logging level

Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs clientsecret credentials when sent as a query parameter. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if authentication is provided via query parameters...

8.8CVSS6.5AI score0.01316EPSS
SaveExploits0References1
Rows per page
Query Builder