Description (CNA)
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache ShenYu (incubating) | affected Apache ShenYu (incubating) before 2.4.2 |
CWE
CWE-522
References
- https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s
- http://www.openwall.com/lists/oss-security/2022/01/25/7
- http://www.openwall.com/lists/oss-security/2022/01/26/4
ADP enrichment
No English description supplied.