An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-51712.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "2.0.0" } ] } ]