CVE-2024-3165 (GCVE-0-2024-3165)

Vulnerability from cvelistv5 – Published: 2024-04-01 21:38 – Updated: 2024-09-30 15:27
VLAI
Title
Database Credential Exposure in the Logs
Summary
System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment.   OWASP Top 10 - A05) Insecure Design OWASP Top 10 - A05) Security Misconfiguration OWASP Top 10 - A09) Security Logging and Monitoring Failure
Severity
4.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-04-02 15:07 UTC
CWE
  • CWE-532 - Insertion of Sensitive Information into Log File
Assigner
References
Impacted products
Vendor Product Version CPE status
dotCMS dotCMS core Affected: 22.02 and after
guessed Create a notification for this product.
dotcms dotcms Affected: 22.02 , < * (custom)
    cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:05:07.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.dotcms.com/security/SI-70"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/dotCMS/core/issues/27910"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/dotCMS/core/pull/28006"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dotcms",
            "vendor": "dotcms",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "22.02",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3165",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-02T15:07:00.832616Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-27T15:35:24.144Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "dotCMS core",
          "vendor": "dotCMS",
          "versions": [
            {
              "status": "affected",
              "version": "22.02 and after"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cb\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eSystem-\u0026gt;Maintenance-\u0026gt; Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. \u0026nbsp;\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eOWASP Top 10 - A05) Insecure Design\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eOWASP Top 10 - A05) Security Misconfiguration\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eOWASP Top 10 - A09) Security Logging and Monitoring Failure\u003c/span\u003e\u003c/p\u003e\u003c/b\u003e\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "System-\u003eMaintenance-\u003e Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. \u00a0\n\nOWASP Top 10 - A05) Insecure Design\n\nOWASP Top 10 - A05) Security Misconfiguration\n\nOWASP Top 10 - A09) Security Logging and Monitoring Failure"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-131",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-131 Resource Leak Exposure"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-30T15:27:54.804Z",
        "orgId": "5b9d93f2-25c7-46b4-ab60-d201718c9dd8",
        "shortName": "dotCMS"
      },
      "references": [
        {
          "url": "https://www.dotcms.com/security/SI-70"
        },
        {
          "url": "https://github.com/dotCMS/core/issues/27910"
        },
        {
          "url": "https://github.com/dotCMS/core/pull/28006"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Database Credential Exposure in the Logs",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5b9d93f2-25c7-46b4-ab60-d201718c9dd8",
    "assignerShortName": "dotCMS",
    "cveId": "CVE-2024-3165",
    "datePublished": "2024-04-01T21:38:04.085Z",
    "dateReserved": "2024-04-01T21:31:06.377Z",
    "dateUpdated": "2024-09-30T15:27:54.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-3165",
      "date": "2026-09-22",
      "epss": "0.00495",
      "percentile": "0.41553"
    },
    "fkie_nvd": {
      "descriptions": [
        {
          "lang": "en",
          "value": "System-\u003eMaintenance-\u003e Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. \u00a0\n\nOWASP Top 10 - A05) Insecure Design\n\nOWASP Top 10 - A05) Security Misconfiguration\n\nOWASP Top 10 - A09) Security Logging and Monitoring Failure"
        },
        {
          "lang": "es",
          "value": "System-\u0026gt;Maintenance-\u0026gt; Log Files en el panel de dotCMS proporciona el nombre de usuario/contrase\u00f1a para las conexiones de la base de datos en la salida del registro. Sin embargo, este es un problema moderado, ya que requiere un administrador de backend y que las bases de datos est\u00e9n bloqueadas por el entorno. OWASP Top 10 - A05) Dise\u00f1o inseguro OWASP Top 10 - A05) Configuraci\u00f3n incorrecta de seguridad OWASP Top 10 - A09) Fallo de registro y monitoreo de seguridad"
        }
      ],
      "id": "CVE-2024-3165",
      "lastModified": "2024-11-21T09:29:02.997",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            },
            "exploitabilityScore": 0.9,
            "impactScore": 3.6,
            "source": "security@dotcms.com",
            "type": "Secondary"
          }
        ]
      },
      "published": "2024-04-01T22:15:23.080",
      "references": [
        {
          "source": "security@dotcms.com",
          "url": "https://github.com/dotCMS/core/issues/27910"
        },
        {
          "source": "security@dotcms.com",
          "url": "https://github.com/dotCMS/core/pull/28006"
        },
        {
          "source": "security@dotcms.com",
          "url": "https://www.dotcms.com/security/SI-70"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://github.com/dotCMS/core/issues/27910"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://github.com/dotCMS/core/pull/28006"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.dotcms.com/security/SI-70"
        }
      ],
      "sourceIdentifier": "security@dotcms.com",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-532"
            }
          ],
          "source": "security@dotcms.com",
          "type": "Secondary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "dotCMS core",
                "vendor": "dotCMS",
                "versions": [
                  {
                    "status": "affected",
                    "version": "22.02 and after"
                  }
                ]
              }
            ],
            "source": "security@dotcms.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dotcms",
                "vendor": "dotcms",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "affected",
                    "version": "22.02",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B8156D65-B011-4B9A-BF2E-F7F3CCFA8BD7",
                    "versionEndExcluding": "22.03.15",
                    "versionStartIncluding": "22.02",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4513A2EB-037F-4037-B4F7-44B8AECB407A",
                    "versionEndExcluding": "23.01.15",
                    "versionStartIncluding": "23.01",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E85B4224-34E8-47CD-8F08-8B129868AF1F",
                    "versionEndIncluding": "23.09.7",
                    "versionStartIncluding": "23.02",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:23.10.24:1:*:*:lts:*:*:*",
                    "matchCriteriaId": "33DBCA2A-D4E2-4AE6-B6E0-FD0A277266F4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:23.10.24:2:*:*:lts:*:*:*",
                    "matchCriteriaId": "342C11DD-7760-42AE-8670-4461ECB51E4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:23.10.24:3:*:*:lts:*:*:*",
                    "matchCriteriaId": "90B73A81-7202-4B0B-822B-4F2EE4480663",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:23.10.24:4:*:*:lts:*:*:*",
                    "matchCriteriaId": "0BFA7220-B846-451B-A7B2-C3DC87767575",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:23.10.24:5:*:*:lts:*:*:*",
                    "matchCriteriaId": "258813CA-66A7-4DCA-883D-884FB88430DC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:23.10.24:6:*:*:lts:*:*:*",
                    "matchCriteriaId": "E69C8B72-A38C-4D97-83BB-DCE392D3ABD0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:dotcms:dotcms:23.10.24:7:*:*:lts:*:*:*",
                    "matchCriteriaId": "B5309F19-2D65-4E87-87FD-2A0294008FF5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "System-\u003eMaintenance-\u003e Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. \u00a0\n\nOWASP Top 10 - A05) Insecure Design\n\nOWASP Top 10 - A05) Security Misconfiguration\n\nOWASP Top 10 - A09) Security Logging and Monitoring Failure"
          },
          {
            "lang": "es",
            "value": "System-\u0026gt;Maintenance-\u0026gt; Log Files en el panel de dotCMS proporciona el nombre de usuario/contrase\u00f1a para las conexiones de la base de datos en la salida del registro. Sin embargo, este es un problema moderado, ya que requiere un administrador de backend y que las bases de datos est\u00e9n bloqueadas por el entorno. OWASP Top 10 - A05) Dise\u00f1o inseguro OWASP Top 10 - A05) Configuraci\u00f3n incorrecta de seguridad OWASP Top 10 - A09) Fallo de registro y monitoreo de seguridad"
          }
        ],
        "id": "CVE-2024-3165",
        "lastModified": "2026-06-17T07:43:26.620",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 4.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 0.9,
              "impactScore": 3.6,
              "source": "security@dotcms.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-3165",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-02T15:07:00.832616Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-04-01T22:15:23.080",
        "references": [
          {
            "source": "security@dotcms.com",
            "tags": [
              "Issue Tracking"
            ],
            "url": "https://github.com/dotCMS/core/issues/27910"
          },
          {
            "source": "security@dotcms.com",
            "tags": [
              "Issue Tracking"
            ],
            "url": "https://github.com/dotCMS/core/pull/28006"
          },
          {
            "source": "security@dotcms.com",
            "tags": [
              "Broken Link"
            ],
            "url": "https://www.dotcms.com/security/SI-70"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking"
            ],
            "url": "https://github.com/dotCMS/core/issues/27910"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking"
            ],
            "url": "https://github.com/dotCMS/core/pull/28006"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Broken Link"
            ],
            "url": "https://www.dotcms.com/security/SI-70"
          }
        ],
        "sourceIdentifier": "security@dotcms.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-532"
              }
            ],
            "source": "security@dotcms.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T19:09:49+00:00",
      "cve": "CVE-2024-3165",
      "id": "CVE-2024-3165",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Database Credential Exposure in the Logs",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-3165.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T20:05:07.539Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.dotcms.com/security/SI-70"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://github.com/dotCMS/core/issues/27910"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://github.com/dotCMS/core/pull/28006"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:dotcms:dotcms:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dotcms",
                "vendor": "dotcms",
                "versions": [
                  {
                    "lessThan": "*",
                    "status": "affected",
                    "version": "22.02",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-3165",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-04-02T15:07:00.832616Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-27T15:35:19.503Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "dotCMS core",
              "vendor": "dotCMS",
              "versions": [
                {
                  "status": "affected",
                  "version": "22.02 and after"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cb\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eSystem-\u0026gt;Maintenance-\u0026gt; Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. \u0026nbsp;\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eOWASP Top 10 - A05) Insecure Design\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eOWASP Top 10 - A05) Security Misconfiguration\u003c/span\u003e\u003c/p\u003e\u003cp\u003e\u003cspan style=\"background-color: transparent;\"\u003eOWASP Top 10 - A09) Security Logging and Monitoring Failure\u003c/span\u003e\u003c/p\u003e\u003c/b\u003e\u003cbr\u003e\u003cbr\u003e"
                }
              ],
              "value": "System-\u003eMaintenance-\u003e Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. \u00a0\n\nOWASP Top 10 - A05) Insecure Design\n\nOWASP Top 10 - A05) Security Misconfiguration\n\nOWASP Top 10 - A09) Security Logging and Monitoring Failure"
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-131",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-131 Resource Leak Exposure"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 4.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-532",
                  "description": "CWE-532 Insertion of Sensitive Information into Log File",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-09-30T15:27:54.804Z",
            "orgId": "5b9d93f2-25c7-46b4-ab60-d201718c9dd8",
            "shortName": "dotCMS"
          },
          "references": [
            {
              "url": "https://www.dotcms.com/security/SI-70"
            },
            {
              "url": "https://github.com/dotCMS/core/issues/27910"
            },
            {
              "url": "https://github.com/dotCMS/core/pull/28006"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Database Credential Exposure in the Logs",
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "5b9d93f2-25c7-46b4-ab60-d201718c9dd8",
        "assignerShortName": "dotCMS",
        "cveId": "CVE-2024-3165",
        "datePublished": "2024-04-01T21:38:04.085Z",
        "dateReserved": "2024-04-01T21:31:06.377Z",
        "dateUpdated": "2024-09-30T15:27:54.804Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.