DB username/password revealed in application logs

CVE-2023-2514

Summary

The Mattermost Server contains a vulnerability where sensitive database usernames and passwords are not properly redacted before being logged during server initialization. This weakness can lead to unauthorized access and potential exploitation by malicious actors who gain insight into sensitive application configuration details. It is crucial for organizations using Mattermost to apply the relevant patches and follow best practices for security to mitigate this risk.

References