| Package | Affected versions | Patched versions |
|---|---|---|
| dotcms | = 23.10.24≥ 22.02, < 22.03.15≥ 23.01, < 23.01.15≥ 23.02, ≤ 23.09.7 | 22.03.1523.01.15 |
System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. OWASP Top 10 - A05) Insecure Design OWASP Top 10 - A05) Security Misconfiguration OWASP Top 10 - A09) Security Logging and Monitoring Failure
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free