Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:36:26 +0000 CVE-2024-3165 — Database Credential Exposure in the Logs https://cve.radiocsirt.org/vuln/cve-2024-3165 <p><strong>Affected:</strong> dotCMS core, dotcms</p> <p>System-&gt;Maintenance-&gt; Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment.</p> <p>OWASP Top 10 - A05) Insecure Design</p> <p>OWASP Top 10 - A05) Security Misconfiguration</p> <p>OWASP Top 10 - A09) Security Logging and Monitoring Failure</p> <p><strong>Affected:</strong> dotCMS core, dotcms</p> <p>System-&gt;Maintenance-&gt; Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment.</p> <p>OWASP Top 10 - A05) Insecure Design</p> <p>OWASP Top 10 - A05) Security Misconfiguration</p> <p>OWASP Top 10 - A09) Security Logging and Monitoring Failure</p> https://cve.radiocsirt.org/vuln/cve-2024-3165