Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Avapl

#46457de 53,632
5.5CVSS total
Vulnerabilidades · 1
PT-2023-22270
5.5
2023-04-27
Lightbend · Alpakka Kafka · CVE-2023-29471
**Name of the Vulnerable Software and Affected Versions** Lightbend Alpakka Kafka versions prior to 5.0.0 **Description** The issue allows log files to contain credentials if plain cleartext login is configured, as the configuration is logged as debug information. This occurs in the `akka.kafka.internal.KafkaConsumerActor`. **Recommendations** For versions prior to 5.0.0, update to version 5.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of credential exposure.