CVE Vulnerabilities

CVE-2023-28441

Insertion of Sensitive Information into Log File

Published: Mar 24, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will have their password stored in error logs. This problem doesnt occur in version 0.5.9. As a workaround, delete the affected log file, and ensure one logs in correctly.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Smartcars_3 Invernyx * 0.5.9 (excluding)

Potential Mitigations

References