← Back

CVE-2023-31056

nvd nist
Published: Apr 24, 2023Modified: Feb 4, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employed. The fixed versions are 5.15.4, 5.16.2, 5.17.3, and 6.0.x.

Affected (5)

Products: Cloverdx: Cloverdx
Cloverdx
1 product
Cloverdx
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Cloverdx
Cloverdx
From 5.14.0 to 5.14.3
Cloverdx
From 5.15.0 to 5.15.3
Cloverdx
From 5.17.0 to 5.17.3
Cloverdx
Version 5.16.0
Cloverdx
Version 5.16.1

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

Source: cve@mitre.org
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.