Critical severity9.8NVD Advisory· Published Feb 9, 2018· Updated Jun 17, 2026
CVE-2018-1000060
CVE-2018-1000060
Description
Sensu, Inc. Sensu Core version Before 1.2.0 & before commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b contains a CWE-522 vulnerability in Sensu::Utilities.redact_sensitive() that can result in sensitive configuration data (e.g. passwords) may be logged in clear-text. This attack appear to be exploitable via victims with configuration matching a specific pattern will observe sensitive data outputted in their service log files. This vulnerability appears to have been fixed in 1.2.1 and later, after commit 46ff10023e8cbf1b6978838f47c51b20b98fe30b.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sensuRubyGems | < 1.2.1 | 1.2.1 |
Affected products
1Patches
Vulnerability mechanics
References
7- github.com/sensu/sensu/pull/1810nvdIssue TrackingPatchThird Party AdvisoryVendor AdvisoryWEB
- access.redhat.com/errata/RHSA-2018:0616nvdThird Party AdvisoryWEB
- access.redhat.com/errata/RHSA-2018:1112nvdThird Party AdvisoryWEB
- access.redhat.com/errata/RHSA-2018:1606nvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-69mv-3642-wj3wghsaADVISORY
- github.com/sensu/sensu/issues/1804nvdIssue TrackingVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-1000060ghsaADVISORY
News mentions
0No linked articles in our index yet.