Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p77h-hv6g-fmfp

Опубликовано: 03 сент. 2020
Источник: github
Github: Прошло ревью
CVSS3: 5

Описание

Sensitive Data Exposure in ibm_db

Versions of ibm_db prior to 2.6.0 are vulnerable to Sensitive Data Exposure. The package printed database credentials in plaintext in logs while in debug mode.

Recommendation

Upgrade to version 2.6.0 or later and ensure sensitive information was not logged.

Пакеты

Наименование

ibm_db

npm
Затронутые версииВерсия исправления

< 2.6.0

2.6.0

5 Medium

CVSS3

5 Medium

CVSS3