GHSA-p77h-hv6g-fmfp

Source

https://github.com/advisories/GHSA-p77h-hv6g-fmfp

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-p77h-hv6g-fmfp/GHSA-p77h-hv6g-fmfp.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-p77h-hv6g-fmfp

Published

2020-09-03T20:43:16Z

Modified

2021-09-29T18:49:03Z

Severity

5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Sensitive Data Exposure in ibm_db

Details

Versions of ibm_db prior to 2.6.0 are vulnerable to Sensitive Data Exposure. The package printed database credentials in plaintext in logs while in debug mode.

Recommendation

Upgrade to version 2.6.0 or later and ensure sensitive information was not logged.

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2020-08-31T18:50:21Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}

References

Affected packages

npm / ibm_db

Package

Name: ibm_db; View open source insights on deps.dev
Purl: pkg:npm/ibm_db

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.6.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-p77h-hv6g-fmfp/GHSA-p77h-hv6g-fmfp.json"