Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39958
HistoryMar 27, 2023 - 2:28 a.m.

Insecure Session Management

2023-03-2702:28:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
225
spring-vault-core
insecure session management
sensitive information exposure
logs
vault batch token

EPSS

0

Percentile

5.1%

spring-vault-core is vulnerable to Insecure Session Management. The vulnerability exists because the library does not properly hide sensitive information from logs after a revocation failure, which allows an attacker to insert sensitive information into a log file when it attempts to revoke a Vault batch token.

EPSS

0

Percentile

5.1%

Related for VERACODE:39958