NetSight
medium5.3

CVE-2022-32217

A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.

Impact

A cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs.

Affected products

VendorProductAffected versions
Rocket.ChatRocket.Chat
before 4.6.4

Weakness classification

References