Threats Tagged 'ghsa-cmfx-346m-p68q'

Armatura One's message broker logs client connection credentials, including passwords, in plain text during normal operation. This allows any party with read access to these logs or related backups to obtain sensitive credential information. The vulnerability is identified as CWE-532 and affects versions prior to 4.6.1 and 4.7.2. The CVSS score is 4.0, indicating a medium severity issue with low impact on confidentiality and no impact on integrity or availability.