Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-29471

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-55vq-xpjf-r2xc

Lightbend Alpakka Kafka logs credentials on debug level Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.

gitlab/maven/com.typesafe.akka/akka-stream-kafka_2.11/CVE-2023-29471

Lightbend Alpakka Kafka logs credentials on debug level Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.

gitlab/maven/com.typesafe.akka/akka-stream-kafka_2.12/CVE-2023-29471

Lightbend Alpakka Kafka logs credentials on debug level Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.

gitlab/maven/com.typesafe.akka/akka-stream-kafka_2.13/CVE-2023-29471

Lightbend Alpakka Kafka logs credentials on debug level Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.

gitlab/maven/com.typesafe.akka/akka-stream-kafka_3/CVE-2023-29471

Lightbend Alpakka Kafka logs credentials on debug level Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.

gitlab/maven/com.typesafe.akka/akka-stream-kafka/CVE-2023-29471

Cleartext Storage of Sensitive Information Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.