| Package | Affected versions | Patched versions |
|---|---|---|
| maxscale | ≥ 22.08, < 22.08.8≥ 23.02, < 23.02.3≥ 6.0.0, < 6.4.9< 2.5.28 | 22.08.823.02.36.4.92.5.28 |
An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08.8, and 23.02.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free