medium5.3
CVE-2023-50740
Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged
Impact
In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module. We recommend users upgrade the version of Linkis to version 1.5.0
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.linkis:linkis | < 1.5.0 | 1.5.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Linkis | before 1.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.openwall.com/lists/oss-security/2024/03/06/2
- https://lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo
- https://github.com/advisories/GHSA-m757-p8rv-4q93
- https://nvd.nist.gov/vuln/detail/CVE-2023-50740
- https://github.com/apache/linkis/commit/08cbcfca140afebae10e1582ee87721578719ded