CVE-2023-2514

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Mattermost Sever fails to redact the DB username and password before emitting an application log during server initialization.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200CWE-532

Affected software

No affected versions have been published.

Timeline

Published
May 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-251407.8A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35CVE-2023-251417.5Apache Sling JCR Base < 3.1.12 has a critical injection vulnerability when running on old JDK versions (JDK 1.8.191 or earlier) through utilCVE-2023-251439.8An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote cCVE-2023-251447.8An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and creaCVE-2023-251457.8A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges onCVE-2023-251467.8A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete thCVE-2023-251476.7An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypaCVE-2023-251487.8A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing CVE-2023-251498.8TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through 2.9.2. During instaCVE-2023-25158.8Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privilegeCVE-2023-251505.7Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be trCVE-2023-251517.5opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io/contrib/instrumenta