CVE-2023-50740

In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recommend users upgrade the version of Linkis to version 1.5.0

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - security@apache.org

Published

2024-03-06

Last modified

2025-02-13

Weaknesses

CWE-532

Affected products

• Linkis (Apache)
• Apache Linkis Datasource (Apache Software Foundation)

References

• http://www.openwall.com/lists/oss-security/2024/03/06/2
• https://lists.apache.org/thread/5o342chnpyd6rps68ygzfkzycxl998yo