Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2023-24619
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-13 Feb, 2023 | 19:15
Updated At-21 Mar, 2025 | 18:15

Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versions are 22.3.12, 22.2.10, and 22.1.12.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Secondary3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Type: Primary
Version: 3.1
Base score: 5.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Type: Secondary
Version: 3.1
Base score: 5.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CPE Matches
redpanda
redpanda
>>redpanda>>Versions from 22.1.0(inclusive) to 22.1.12(exclusive)
cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*
redpanda
redpanda
>>redpanda>>Versions from 22.2.0(inclusive) to 22.2.10(exclusive)
cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*
redpanda
redpanda
>>redpanda>>Versions from 22.3.0(inclusive) to 22.3.12(exclusive)
cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-522Primarynvd@nist.gov
CWE-522Secondary134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE ID: CWE-522
Type: Primary
Source: nvd@nist.gov
CWE ID: CWE-522
Type: Secondary
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/redpanda-data/redpanda/pull/8339cve@mitre.org
Exploit
Patch
Vendor Advisory
https://github.com/redpanda-data/redpanda/pull/8339af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
Vendor Advisory
Hyperlink: https://github.com/redpanda-data/redpanda/pull/8339
Source: cve@mitre.org
Resource:
Exploit
Patch
Vendor Advisory
Hyperlink: https://github.com/redpanda-data/redpanda/pull/8339
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Patch
Vendor Advisory
Change History
0Changes found
Details not found