PT-2020-19686
CVE-2020-7654
·
تاريخ النشر
2020-05-29
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
snyk-broker versions prior to 4.73.1
Description
The issue concerns information exposure where private keys are logged if the logging level is set to DEBUG.
Recommendations
For versions prior to 4.73.1, update to version 4.73.1 or later to resolve the issue. As a temporary workaround, consider setting the logging level to a value other than DEBUG to prevent private key logging. Restrict access to log files to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾