Description
A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Rocket.chat | fixed in 4.6.4> | — |
Medium · 5.3
CVE-2022-32217
EUVD-2022-53418GHSA-qf6h-wr49-rv76
A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.
Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by hackerone