GitHub Advisoryadvisory · Maven

GHSA-m757-p8rv-4q93 Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

MEDIUM Published 2024-03-06 Modified 2025-02-13 Official page ↗
Aliases
CVE-2023-50740
Ecosystem
Maven
Packages
org.apache.linkis:linkis
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-532
Reviewed
2024-03-06

Affected packages

• Maven org.apache.linkis:linkis: < 1.5.0 → fixed in 1.5.0

Description

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recommend users upgrade the version of Linkis to version 1.5.0

Related

Alias · CVE (1)

  • CVE-2023-50740 In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. vulnerability

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References