Threats Tagged 'ghsa-92qw-23j4-qrqc'

Progress Software Corporation's MarkLogic Server versions 11.0.0 up to but not including 11.3.7, and 12.0.0 up to but not including 12.1.0, may log sensitive security information in diagnostic logs under certain configurations. This could allow an attacker with access to these logs to gain unauthorized access to protected resources. The vulnerability is identified as CWE-532, involving insertion of sensitive information into log files. It has a high severity with a CVSS score of 8.1.