CVE-2023-2514CWE-200

DB username/password revealed in application logs

Medium · published May 12, 2023

CVSS v3.1
6.7
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

Mattermost Sever fails to redact the DB username and password before emitting an application log during server initialization.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00547 · 45.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-05-12T08:56Z
EPSS history
Timeline
  • 12 MAY 08:56Z
    DB username/password revealed in application logs
    cvelistv5