Description
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Remediation
References
https://spring.io/security/cve-2023-20859
Related Vulnerabilities
CVE-2020-1744 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2020-2205 Vulnerability in maven package org.jenkins-ci.plugins:vncrecorder
CVE-2023-24430 Vulnerability in maven package org.jenkins-ci.plugins:semantic-versioning-plugin
CVE-2021-42357 Vulnerability in maven package org.apache.knox:gateway-service-knoxsso
CVE-2019-10288 Vulnerability in maven package de.e-nexus:jabber-server-plugin