Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-0006 EUVD-2024-15809GHSA-2m5h-vv32-6gjr

DB User Password Leak in Application Log

Published Jul 19, 2024 · Updated Aug 1, 2024 · Assigned by Yugabyte

Description

Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access.

Affected products

VendorProductAffectedFixed
YugabyteDB YugabyteDB Anywhere — —

References