Lucene search
Veracode Vulnerability DatabaseVERACODE:40200HistoryApr 20, 2023 - 4:38 a.m.
Password Disclosure
2023-04-2004:38:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
password disclosure
audit logs
experimentalauditsettings
configuration
software
0.001 Low
EPSS
Percentile
43.2%
github.com/mattermost/mattermost-server is vulnerable to Password Disclosure. The vulnerability exists because the user passwords and hashes are revealed in audit logs if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config).
References
Related
osv
osv
BIT-mattermost-2023-1831
2024-03-06 11:02:04
CVE-2023-1831
2023-04-17 15:15:06
nvd
nvd
CVE-2023-1831
2023-04-17 15:15:06
cvelist
cvelist
CVE-2023-1831 User password logged in audit logs
2023-04-17 14:21:13
prion
prion
Code injection
2023-04-17 15:15:00
cve
cve
CVE-2023-1831
2023-04-17 15:15:06