VULNERABILITY INTELLIGENCE

CVE-2023-29471

CVSS score5.5 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2023-04-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.

Weakness classification

  • nvd@nist.gov: CWE-312
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-312

Primary references