CVE-2023-50740

MEDIUM

Apache Linkis < 1.5.0 - Log Information Exposure

Title source: rule
STIX 2.1

Description

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recommend users upgrade the version of Linkis to version 1.5.0

References (2)

Core 2

Scores

CVSS v3 5.3
EPSS 0.0016
EPSS Percentile 36.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-532
Status published
Products (2)
apache/linkis < 1.5.0
org.apache.linkis/linkis 0 - 1.5.0Maven
Published Mar 06, 2024
Tracked Since Feb 18, 2026