CVE-2022-23716CWE-532

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in…

Medium · published September 28, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2022-09-28T19:34Z
EPSS history
Timeline
  • 28 SEP 19:34Z
    A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in…
    cvelistv5