CVE-2021-44451CWE-522

API sensitive information leak

published February 1, 2022

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07863 · 94.7th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-02-01T13:16Z
EPSS history
Timeline
  • 01 FEB 13:16Z
    API sensitive information leak
    cvelistv5