CVE-2017-0361

api.log contains passwords in plaintext

State: Published
Severity: Not scored
Published: Apr 13, 2018
Updated: Sep 16, 2024
Reserved: Nov 29, 2016

Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
mediawikimediawiki	n/aAffected

References

[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16mailing-list
https://security-tracker.debian.org/tracker/CVE-2017-0361
https://phabricator.wikimedia.org/T125177
1039812vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.