{"id":"CVE-2023-24619","details":"Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versions are 22.3.12, 22.2.10, and 22.1.12.","modified":"2026-08-12T03:51:33.578054931Z","published":"2023-02-13T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/24xxx/CVE-2023-24619.json","cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/24xxx/CVE-2023-24619.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24619"},{"type":"FIX","url":"https://github.com/redpanda-data/redpanda/pull/8339"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/redpanda-data/redpanda","events":[{"introduced":"0"},{"fixed":"4dc385349da3a953de21d7227735ed1990e2f206"},{"introduced":"56e47a5c11d9806fdfe2e8681c880767fc7b270e"},{"fixed":"78c929df04382aa8e7d362a80e53c665d7b21bda"}],"database_specific":{"extracted_events":[{"introduced":"22.2.0"},{"fixed":"22.2.10"},{"introduced":"22.3.0"},{"fixed":"22.3.12"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*"}}],"versions":["v22.2.8","v22.3.2","v22.2.10-rc2","v22.2.10-rc1","v22.3.12-rc4","v22.3.12-rc3","v22.3.12-rc2","v22.3.12-rc1","v22.3.11-rc1","v22.3.11","v22.2.9-rc3","v22.2.9","v22.3.10-rc2","v22.3.10","v22.3.10-rc1","v22.2.9-rc2","v22.2.9-rc1","v22.3.9-rc1","v22.3.9","v22.3.8-rc2","v22.3.8-rc1","v22.3.8","v22.3.7-rc1","v22.3.7","v22.3.6-rc2","v22.3.6","v22.3.6-rc1","v22.3.5-rc2","v22.3.5","v22.3.5-rc1","v22.2.8-rc5","v22.2.8-rc4","v22.2.8-rc3","v22.3.4-rc1","v22.3.4","v22.2.8-rc2","v22.2.8-rc1","v22.3.3-rc1","v22.3.3","v22.3.1","v22.3.1-rc5","v22.3.1-rc4","v22.3.1-rc3","v22.2.7-rc2","v22.2.7","v22.3.1-rc2","v22.2.7-rc1","v22.3.1-rc1","v22.2.6-rc1","v22.2.6","v22.2.5-rc1","v22.2.5","v22.2.4","v22.2.4-rc1","v22.2.3-rc1","v22.2.3","v22.2.2-rc3","v22.2.2","v22.3.0-dev","v22.2.2-rc2","v22.2.2-rc1","v22.2.1","v22.2.1-rc5","v22.2.1-rc4","v22.2.1-rc3","v22.2.1-rc2","v22.2.1-rc1","v22.1.1-rc1","v21.10.1-beta2","v21.12.1-wasm-beta1","v21.11.1-beta1","v21.10.1-beta1","v21.9.1-beta1","v21.8.1-beta2","v21.8.1-beta1","v21.7.6","v21.7.5","v21.6.6","v21.7.3","v21.7.2","v21.7.1","v21.6.5","v21.6.4","v21.6.3","v21.6.2","v21.6.1","v21.5.7","v21.5.6","v21.5.6-beta1","v21.5.5","v21.5.4","v21.5.3","v21.5.2","v21.5.2-beta2","v21.5.2-beta3","v21.5.2-beta1","v21.5.1","v21.4.13","v21.4.16-beta1","v21.4.14","v21.4.15","v21.4.11","v21.4.12","v21.4.10","v21.4.9","v21.4.8","v21.4.7","v21.4.6","v21.4.3","v21.4.5","v21.4.4","v21.4.1","v21.4.2","v21.3.7","v21.3.6-beta1","v21.3.6","v21.3.5-beta6","v21.3.5","v21.3.5-beta5","v21.3.5-beta4","v21.3.5-beta3","v21.3.5-beta2","v21.3.5-beta1","v21.3.4-beta1","v21.3.4","v21.3.3","v21.3.2","v21.3.1","v21.2.2","v21.2.1","v21.1.5","v21.1.4","v21.1.3","v21.1.2","v21.1.1","v20.12.9","v20.12.7","v20.12.6","release-20.12.2","v20.12.5","release-20.12.5","release-20.12.4","release-20.12.3","release-20.12.1","release-20.11.6","release-20.11.5","release-20.11.2","release-20.11.4","release-20.11.3","release-20.11.1","release-0.99.24"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-24619.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}