Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA3N2gtaHY2Zy1mbWZw

Sensitive Data Exposure in ibm_db

Versions of ibm_db prior to 2.6.0 are vulnerable to Sensitive Data Exposure. The package printed database credentials in plaintext in logs while in debug mode.

Recommendation

Upgrade to version 2.6.0 or later and ensure sensitive information was not logged.

Permalink: https://github.com/advisories/GHSA-p77h-hv6g-fmfp
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA3N2gtaHY2Zy1mbWZw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 3 years ago
Updated: 9 months ago

CVSS Score: 5.0
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Identifiers: GHSA-p77h-hv6g-fmfp
References:

• https://github.com/ibmdb/node-ibm_db/issues/563
• https://snyk.io/vuln/SNYK-JS-IBMDB-459762
• https://www.npmjs.com/advisories/1185
• https://github.com/ibmdb/node-ibm_db/commit/526c88b5eedc605274def65405279f6708d91ce8
• https://github.com/advisories/GHSA-p77h-hv6g-fmfp

Affected Packages