CVE-2023-4509

It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt

Medium · published April 17, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
12.8
In the wild
Unconfirmed
What it is

It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00228 · 12.8th percentile
Published
2024-04-17T23:10Z
EPSS history
Timeline
  • 17 APR 23:10Z
    It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt
    cvelistv5