Description (CNA)
Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/akka/alpakka-kafka/issues/1592
- https://akka.io/security/alpakka-kafka-cve-2023-29471.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.