CVE-2024-11217

Summary

CVE-2024-11217 is a newly discovered vulnerability affecting the OAuth-server. This issue arises due to the server logging the OAuth2 client secret when the logLevel is set to Debug or higher for specific ID providers, including OIDC, GitHub, GitLab, and Google. The exposure of client secrets can lead to unauthorized access and potential data breaches. It is crucial for system administrators to promptly update their OAuth-server configurations to mitigate this risk, avoiding the use of debug logging levels for IDP login options with client secrets.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.