VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 14, 2023· Updated Jun 17, 2026

CVE-2023-40354

CVE-2023-40354

Description

An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08.8, and 23.02.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • MariaDB/Maxscale
    cpe:2.3:a:mariadb:maxscale:*:*:*:*:*:*:*:*
    Range: <2.5.28
  • MariaDB/MaxScaledescription
  • MariaDB/MariaDBllm-fuzzy
    Range: <23.02.3, 2.5.28, 6.4.9, 22.08.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.