CVE-2023-31056

—

CVSS 3.1

6.5 medium

EPSS

<1%p48

Published

Apr 24, 2023 (Apr 24, 2023)

Modified

Jun 17, 2026

Description

CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employed. The fixed versions are 5.15.4, 5.16.2, 5.17.3, and 6.0.x.

Vendors: cloverdx
Products: cloverdx
Weakness: CWE-532
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.