In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
References
Link | Resource |
---|---|
https://spring.io/security/cve-2023-20859 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: vmware
Published: 2023-03-23T00:00:00
Updated: 2023-03-23T00:00:00
Reserved: 2022-11-01T00:00:00
Link: CVE-2023-20859
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-03-23T21:15:19.680
Modified: 2023-03-28T13:46:26.830
Link: CVE-2023-20859
JSON object: View
Redhat Information
No data.
CWE