CVEvulnerability

CVE-2024-0006

5.4 MEDIUM Published 2024-07-19 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-07-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.4 MEDIUM — CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-532

Description

Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access.

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References