Vmware Spring Vault vulnerabilities

1 known vulnerability affecting vmware/spring_vault.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-20859MEDIUMCVSS 5.5≥ 2.3.0, < 2.3.3≥ 3.0.0, < 3.0.22023-03-23

CVE-2023-20859 [MEDIUM] CWE-532 CVE-2023-20859: In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.