CVE-2023-24619

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-24619
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-24619.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-24619
Published
2023-02-13T19:15:11.170Z
Modified
2025-11-15T06:17:54.230511Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versions are 22.3.12, 22.2.10, and 22.1.12.

References

Affected packages

Git / github.com/redpanda-data/redpanda

Affected ranges

Type
GIT
Repo
https://github.com/redpanda-data/redpanda
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4dc385349da3a953de21d7227735ed1990e2f206

Affected versions

release-0.*

release-0.99.24

release-20.*

release-20.11.1
release-20.11.2
release-20.11.3
release-20.11.4
release-20.11.5
release-20.11.6
release-20.12.1
release-20.12.2
release-20.12.3
release-20.12.4
release-20.12.5

v20.*

v20.12.5
v20.12.6
v20.12.7
v20.12.9

v21.*

v21.1.1
v21.1.2
v21.1.3
v21.1.4
v21.1.5
v21.10.1-beta1
v21.10.1-beta2
v21.11.1-beta1
v21.12.1-wasm-beta1
v21.2.1
v21.2.2
v21.3.1
v21.3.2
v21.3.3
v21.3.4
v21.3.4-beta1
v21.3.5
v21.3.5-beta1
v21.3.5-beta2
v21.3.5-beta3
v21.3.5-beta4
v21.3.5-beta5
v21.3.5-beta6
v21.3.6
v21.3.6-beta1
v21.3.7
v21.4.1
v21.4.10
v21.4.11
v21.4.12
v21.4.13
v21.4.14
v21.4.15
v21.4.16-beta1
v21.4.2
v21.4.3
v21.4.4
v21.4.5
v21.4.6
v21.4.7
v21.4.8
v21.4.9
v21.5.1
v21.5.2
v21.5.2-beta1
v21.5.2-beta2
v21.5.2-beta3
v21.5.3
v21.5.4
v21.5.5
v21.5.6
v21.5.6-beta1
v21.5.7
v21.6.1
v21.6.2
v21.6.3
v21.6.4
v21.6.5
v21.6.6
v21.7.1
v21.7.2
v21.7.3
v21.7.4
v21.7.5
v21.7.6
v21.8.1-beta1
v21.8.1-beta2
v21.9.1-beta1

v22.*

v22.1.1-rc1
v22.2.1
v22.2.1-rc1
v22.2.1-rc2
v22.2.1-rc3
v22.2.1-rc4
v22.2.1-rc5
v22.2.10-rc1
v22.2.10-rc2
v22.2.2
v22.2.2-rc1
v22.2.2-rc2
v22.2.2-rc3
v22.2.3
v22.2.3-rc1
v22.2.4
v22.2.4-rc1
v22.2.5
v22.2.5-rc1
v22.2.6
v22.2.6-rc1
v22.2.7
v22.2.7-rc1
v22.2.7-rc2
v22.2.8
v22.2.8-rc1
v22.2.8-rc2
v22.2.8-rc3
v22.2.8-rc4
v22.2.8-rc5
v22.2.9
v22.2.9-rc1
v22.2.9-rc2
v22.2.9-rc3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-24619.json"