CVE Vulnerabilities

CVE-2023-28441

Insertion of Sensitive Information into Log File

Published: Mar 24, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will have their password stored in error logs. This problem doesnt occur in version 0.5.9. As a workaround, delete the affected log file, and ensure one logs in correctly.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Smartcars_3Invernyx*0.5.9 (excluding)

Potential Mitigations

References