Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access.
{
"cwe_ids": [
"CWE-532"
],
"cna_assigner": "Yugabyte",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0006.json"
}{
"source": [
"AFFECTED_FIELD",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "2.18.0.0"
},
{
"fixed": "2.18.9.0"
},
{
"introduced": "2.20.0.0"
},
{
"fixed": "2.20.2.3"
},
{
"introduced": "2024.0.0.0"
},
{
"fixed": "2024.1.1.0"
}
]
}
"2026-08-12T15:14:53Z"
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0006.json"
[
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 685.0,
"function_hash": "111742172457227462524558023614276680637"
},
"id": "CVE-2024-0006-00506a99",
"source": "https://github.com/yugabyte/yugabyte-db/commit/439c6286f1971f9ac6bff2c7215b454c2025c593",
"target": {
"function": "executeNodeAction",
"file": "managed/src/main/java/com/yugabyte/yw/common/NodeUniverseManager.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"315377787175297681050555844882471231748",
"224062434678529189363249925224554043636",
"74568947716585662805327203671065792228",
"323261725891464562257344436584369918797",
"266298631161180359145980905364448739168"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-0bf94b07",
"source": "https://github.com/yugabyte/yugabyte-db/commit/3160d6dc32d40b7735d67883ff97b3a4e3b508c2",
"target": {
"file": "managed/src/test/java/com/yugabyte/yw/commissioner/tasks/upgrade/VMImageUpgradeTest.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"109694266099315549091197017739972994578",
"91542806952894507051640641460383424399",
"199861330546291493120242232507079264448",
"45708976272662552971079673234847665862",
"322789261925881149246278514047879809516",
"277993275922029553995388620609821095426",
"304759495236097384899519549027554976221",
"273095144692544493956868553716458124108",
"208736349463615089962155440178611137624",
"61987756175235391418758543689729051515",
"327441407665045361708036716452940753449",
"91190739637198095058350304611076892605",
"102845620910366683321516791521592034946",
"130581365850471306702871129065705076192"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-0fb95124",
"source": "https://github.com/yugabyte/yugabyte-db/commit/3160d6dc32d40b7735d67883ff97b3a4e3b508c2",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/commissioner/tasks/upgrade/VMImageUpgrade.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"11389920105758554944963514164263468968",
"298608128867452544279624404720296256673",
"61993129226591049064768845705770410160"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-110d25e7",
"source": "https://github.com/yugabyte/yugabyte-db/commit/d96e6b629f34d065b47204daeeb44064e484c579",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/common/NodeUniverseManager.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"11389920105758554944963514164263468968",
"298608128867452544279624404720296256673",
"61993129226591049064768845705770410160"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-263a1c88",
"source": "https://github.com/yugabyte/yugabyte-db/commit/439c6286f1971f9ac6bff2c7215b454c2025c593",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/common/NodeUniverseManager.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"145878760185021733676047810298057139677",
"131759605975339432426238576699835643882",
"297264664706793326600772150052913423356",
"132847994832259114645480829444229329189",
"162195021970260964972250853125844279640",
"236026168900537603064656343367783683747",
"94824410403915668193624541090889625913",
"188540445680961453232273804120965625806",
"186753726879411038454968468642555223540",
"172930957495266724247544484633476669882",
"229166611055917623899303771883521255681",
"104336130339142459272500801719689741489",
"65753246529951404070806061581877166239",
"293330178856418525386129159409184394001"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-2be5ac5a",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"file": "managed/src/test/java/com/yugabyte/yw/commissioner/tasks/upgrade/GFlagsUpgradeTest.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"109532127099066990691795552332553962010",
"158673179816703667708986638511083354932",
"258631305502593764081309843379063478100",
"279171531623894880461121929134612228186",
"33247456964346281351246461926336096781",
"274326567346553066207835707647630001769",
"247121468447045292960114483728385899061"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-312fa824",
"source": "https://github.com/yugabyte/yugabyte-db/commit/1e026d178152c09ab721bec5f232be40107a1781",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/models/Schedule.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 840.0,
"function_hash": "199810376105424455875197400805810848858"
},
"id": "CVE-2024-0006-32b308e7",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"function": "validateParams",
"file": "managed/src/main/java/com/yugabyte/yw/commissioner/tasks/UniverseTaskBase.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"145646518922832758295570483725596633922",
"106101201273442763794365301939436915796",
"208473677295071005981444236329111900427",
"209473620427121150496080974423368804811",
"243395273222401233838981610795861174880",
"54863284238210073198483403561305457061",
"207208928428376322415285410613473834081",
"14189691446190107686796816168184734163",
"334648078640470663066726230999618716218",
"205068847157588403484700378928822904349",
"1034490613777045867566930798536783772",
"115395432941611378216693272433255671268",
"88465081577490576243206859404872014563",
"312060101094837494041846587305730464776",
"77261424282020706212542852171990098538",
"196472349730617075571176918720135722025",
"219561761108545395581747322221104626709"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-48d8b672",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/forms/UpgradeWithGFlags.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"11354766202804962511017094579640419973",
"316695995683428540440001328196327467660",
"163232000039711227443358704837506944144",
"191604009464732003689657609166077320632",
"97990694200466669581105477180518555265",
"153469206817198140761672362835827574414",
"216140875946871085036432819298455190306",
"124976706884753607227559001243000262894",
"277200979012095771808410924825595218117",
"1065538838565066617422355277589971610",
"211431494033040890345072179073172820302",
"38835175119731690864547067334794293831",
"203481328625867658859854775203354494017",
"227639070004473857713883520426928736134"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-4fc51b7c",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/commissioner/tasks/UniverseTaskBase.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"91832637901372149104936344002882504375",
"21277416036381663721264212938634894354",
"302671377829334935547774615545473672546",
"307283325875550118683953102963065407508",
"89182106140433566470468232316648405130",
"313391493330094863566763796951635355890",
"104243571535456280917442508940366476688",
"332898280175556799373231524395700989322"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-504e0449",
"source": "https://github.com/yugabyte/yugabyte-db/commit/1e026d178152c09ab721bec5f232be40107a1781",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/models/BackupResp.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"5988674756015650450610788181500602242",
"195448640982243879799419241712211337963",
"140199462780682134239808793303122113915",
"103517428064238874001295004610065549474",
"246434812785116494242971090267263140242",
"84822847429655256075647629996936514815",
"300946790995820408081362488769453435596",
"65446414189899808938333043897016977243",
"243290544253486360168155657267162287992",
"102073100024390994132850177152790158072",
"123102004187822096170994571976828466784",
"55377239033237746755399366962221802872",
"283201274854289011957558420161515172605",
"14806656982237792037627906874473892244",
"335619711216106135208296596645904008543",
"187356542936540329675728241968195854180",
"250112717276510082525175500216455437094"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-518c678b",
"source": "https://github.com/yugabyte/yugabyte-db/commit/1e026d178152c09ab721bec5f232be40107a1781",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/models/helpers/NodeConfig.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"288933721301365377620146062408733198215",
"222162103798919583302893063366974130484",
"80687333164117928657806205820710195893",
"303482049219689566439585295565147454833",
"5416320173623175377846467190214307416",
"3605879867504599534755030553769615735"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-6eebeb71",
"source": "https://github.com/yugabyte/yugabyte-db/commit/1e026d178152c09ab721bec5f232be40107a1781",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/models/helpers/provider/KubernetesInfo.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"6894624153638196975409363752925573655",
"136443557841557263214695467465497145504",
"28162449597602597914726579954194276287",
"35248464383811222697791518531298647123",
"111030674191308277087296880645642983900",
"282340499572879023168096256469414097784"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-730689c5",
"source": "https://github.com/yugabyte/yugabyte-db/commit/1e026d178152c09ab721bec5f232be40107a1781",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/forms/MetricQueryParams.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"147721514061172618889861462189994803788",
"56768333035609680001720525859778089634",
"189241120830968215907535426427238688567",
"330457565877702303600424183819224946571",
"179724114361784473010986259339883414683",
"207475298109479908190484951728634227806",
"46036827045991260570756883318356418981",
"235161129116499368188836325475014620871"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-84aa6182",
"source": "https://github.com/yugabyte/yugabyte-db/commit/1e026d178152c09ab721bec5f232be40107a1781",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/models/Users.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 531.0,
"function_hash": "193371112350384276315955637253155099939"
},
"id": "CVE-2024-0006-856a4abc",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"function": "getAllowedTasksOnFailure",
"file": "managed/src/main/java/com/yugabyte/yw/commissioner/tasks/UniverseTaskBase.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 726.0,
"function_hash": "162802020844669370753767998111570763868"
},
"id": "CVE-2024-0006-90cc6ff7",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"function": "getNewVersionsOfClusters",
"file": "managed/src/main/java/com/yugabyte/yw/forms/UpgradeWithGFlags.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"24948340357826331691213771832839756879",
"196698125574575875491569437631161893422",
"160482444002996011258190677476448406062",
"124106666260142512407393998367731214515",
"2113430514936258875446648796081378232",
"21718261814152176071967203715244715952",
"177762993888321368777638167972347085947"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-a655af99",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/forms/GFlagsUpgradeParams.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"149022577874177875186360062675786914772",
"327484965834047856795006329662645529493",
"280664438007062929339966357175637182424",
"62750190272090946674413421417201211741",
"159355415148365645477874280620130297133",
"268360891495409627848156812129290940880",
"221105419723329264135262314641298205401",
"199902337067822446559104703030887288305",
"245858132256441112873040516745898138064",
"158709238372457729839555266644986329583",
"334879392408995473931362246718100843594"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-befa1ea1",
"source": "https://github.com/yugabyte/yugabyte-db/commit/1e026d178152c09ab721bec5f232be40107a1781",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/forms/BackupTableParams.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"11389920105758554944963514164263468968",
"298608128867452544279624404720296256673",
"221980119070384969782492613064712299656"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-e2167ec6",
"source": "https://github.com/yugabyte/yugabyte-db/commit/5cc7f4e15d6ccccbf97c57946fd0aa630f88c9e2",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/common/NodeUniverseManager.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 883.0,
"function_hash": "290145766190322001349470476105973073173"
},
"id": "CVE-2024-0006-e54915cc",
"source": "https://github.com/yugabyte/yugabyte-db/commit/5cc7f4e15d6ccccbf97c57946fd0aa630f88c9e2",
"target": {
"function": "executeNodeAction",
"file": "managed/src/main/java/com/yugabyte/yw/common/NodeUniverseManager.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 4622.0,
"function_hash": "40983636442169824915499057378188853249"
},
"id": "CVE-2024-0006-ee29d899",
"source": "https://github.com/yugabyte/yugabyte-db/commit/3160d6dc32d40b7735d67883ff97b3a4e3b508c2",
"target": {
"function": "createVMImageUpgradeTasks",
"file": "managed/src/main/java/com/yugabyte/yw/commissioner/tasks/upgrade/VMImageUpgrade.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 685.0,
"function_hash": "111742172457227462524558023614276680637"
},
"id": "CVE-2024-0006-eeeacbec",
"source": "https://github.com/yugabyte/yugabyte-db/commit/d96e6b629f34d065b47204daeeb44064e484c579",
"target": {
"function": "executeNodeAction",
"file": "managed/src/main/java/com/yugabyte/yw/common/NodeUniverseManager.java"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"165067900967461793058110337822049374302",
"125956716752453499460331008929806329691",
"76028456020034666355877952200984818793",
"120882993852758774263853032081047020276",
"76534242812602544790064906353406498457",
"191628134989823681483327761040537362829",
"106790554164034658866973384029005077781",
"247722333999048407609083018525328038076",
"56231909772480819520414667537660898827",
"243923049380318399991421593794552064185",
"66221071504188331597806300631980873421",
"242540822964332589272593838616488363498",
"174055570861091330369745960203848004369",
"17620116839342709022258154921239736644",
"92941172018639033238390958023515975630",
"96973277356701016768895942288411760318",
"81449609925957033512599293361853288556",
"143001968258013308793590195364201733966",
"304874153088511706010981149512754064980",
"217449516169021265242983158620301109099"
],
"threshold": 0.9
},
"id": "CVE-2024-0006-fc3aceaf",
"source": "https://github.com/yugabyte/yugabyte-db/commit/fa37f904d5f6b69e346af0c8c90926362e73905e",
"target": {
"file": "managed/src/main/java/com/yugabyte/yw/commissioner/tasks/upgrade/GFlagsUpgrade.java"
}
}
]