Aller au contenu
Non notée

CVE-2023-20859 In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is…

Description

In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring Vault, Spring Cloud Vault, Spring Cloud Config Versions non publiées
Suivre cette CVE