VULNERABILITY INTELLIGENCE
CVE-2024-0006
CVSS score5.4 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2024-07-19
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access.
Weakness classification
- CWE-532: Insertion of Sensitive Information into Log File