CVE-2023-30610
- Source
- https://cve.org/CVERecord?id=CVE-2023-30610
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-30610.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-30610
- Aliases
- Published
- 2023-04-19T17:18:54Z
- Modified
- 2026-10-21T02:49:44Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending
- Details
-
aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The
aws_sigv4::SigningParamsstruct had a derivedDebugimplementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK,SigningParamsis printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g.RUST_LOG=trace), or for theaws-sigv4crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates. - Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-532" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30610.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "introduced": ">= 0.52.0, < 0.52.1, " }, { "last_affected": ">= 0.52.0, < 0.52.1, " } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" } ] }, { "extracted_events": [ { "range": [ { "introduced": "0.2.0" }, { "fixed": "0.2.1" }, { "introduced": "0.3.0" }, { "fixed": "0.3.1" }, { "introduced": "0.5.2" }, { "fixed": "0.5.3" }, { "introduced": "0.6.0" }, { "fixed": "0.6.1" }, { "introduced": "0.7.0" }, { "fixed": "0.7.1" }, { "introduced": "0.8.0" }, { "fixed": "0.8.1" }, { "introduced": "0.9.0" }, { "fixed": "0.9.1" }, { "introduced": "0.10.1" }, { "fixed": "0.10.2" }, { "introduced": "0.11.0" }, { "fixed": "0.11.1" }, { "introduced": "0.12.0" }, { "fixed": "0.12.1" }, { "introduced": "0.13.0" }, { "fixed": "0.13.1" }, { "introduced": "0.14.0" }, { "fixed": "0.14.1" }, { "introduced": "0.15.0" }, { "fixed": "0.15.1" }, { "introduced": "0.46.0" }, { "fixed": "0.46.1" }, { "introduced": "0.47.0" }, { "fixed": "0.47.1" }, { "introduced": "0.48.0" }, { "fixed": "0.48.1" }, { "introduced": "0.49.0" }, { "fixed": "0.49.1" }, { "introduced": "0.50.0" }, { "fixed": "0.51.1" }, { "introduced": "0.53.1" }, { "fixed": "0.53.2" }, { "introduced": "0.54.1" }, { "fixed": "0.54.2" }, { "introduced": "0.55.0" }, { "fixed": "0.55.1" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" } ] } ] }- References
Affected packages
Git / github.com/awslabs/aws-sdk-rust
Affected ranges
- Type
- GIT
- Repo
- https://github.com/awslabs/aws-sdk-rust
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0.4.1" }, { "fixed": "0.4.2" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.2.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.2.0" }, { "last_affected": "0.2.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.3.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.3.0" }, { "last_affected": "0.3.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.4.1:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.4.1" }, { "last_affected": "0.4.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.5.2:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.5.2" }, { "last_affected": "0.5.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.6.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.6.0" }, { "last_affected": "0.6.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.7.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.7.0" }, { "last_affected": "0.7.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.8.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.8.0" }, { "last_affected": "0.8.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.9.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.9.0" }, { "last_affected": "0.9.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.10.1:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.10.1" }, { "last_affected": "0.10.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.11.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.11.0" }, { "last_affected": "0.11.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.12.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.12.0" }, { "last_affected": "0.12.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.13.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.13.0" }, { "last_affected": "0.13.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.14.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.14.0" }, { "last_affected": "0.14.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:amazon:aws-sigv4:0.15.0:*:*:*:*:rust:*:*", "range": [ { "introduced": "0.15.0" }, { "last_affected": "0.15.0" } ], "source": "CPE_STRING" } ] }