CVE Database
/

CVE-2024-0006

Back to search

CVE-2024-0006

Published: Jul 19, 2024

Modified: Aug 1, 2024

PUBLISHED

Description

Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access.

VendorProductVersions

YugabyteDB

YugabyteDB Anywhere

affected
2.18.0.0 - < 2.18.9.0
affected
2.20.0.0 - < 2.20.2.3
affected
2024.0.0.0 - < 2024.1.1.0

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now