[<prev] [next>] [day] [month] [year] [list]
Message-ID: <c2b27dd3-7cec-388f-aab9-e48b2b084b14@apache.org>
Date: Wed, 06 Mar 2024 13:27:54 +0000
From: Heping Wang <peacewong@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2023-50740: Apache Linkis DataSource: DataSource module Oracle
SQL Database Password Logged
Severity: moderate
Affected versions:
- Apache Linkis DataSource * before 1.5.0
Description:
In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.
We recommend users upgrade the version of Linkis to version 1.5.0
Credit:
Jonathan Leitschuh (reporter)
References:
https://linkis.apache.org
https://www.cve.org/CVERecord?id=CVE-2023-50740
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
