CVE-2023-28441 — smartCARS 3 Password Stored as plain text in Error Log

CVE-2023-28441

smartCARS 3 Password Stored as plain text in Error Log PUBLISHED

Description (CNA)

smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will have their password stored in error logs. This problem doesn't occur in version 0.5.9. As a workaround, delete the affected log file, and ensure one logs in correctly.

Affected (CNA)

Vendor / product	Versions
invernyx / smartcars-3-bugs	affected < 0.5.9

CWE

CWE-532

References

https://github.com/invernyx/smartcars-3-bugs/security/advisories/GHSA-fp42-c8g2-5jc7

ADP enrichment

CVE

No English description supplied.

https://github.com/invernyx/smartcars-3-bugs/security/advisories/GHSA-fp42-c8g2-5jc7

CISA-ADP

No English description supplied.

No references supplied.