Description
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-0444 Vulnerability (CVE-2013-0444)
WordPress Plugin My WordPress Login Logo Multiple Unspecified Vulnerabilities (2.1)
MySQL CVE-2023-21887 Vulnerability (CVE-2023-21887)
MySQL CVE-2022-21363 Vulnerability (CVE-2022-21363)
WordPress Plugin WooCommerce Multiple Vulnerabilities (6.2.0)