CVE-2023-40354

https://notcve.org/view.php?id=CVE-2023-40354

14 Aug 2023 — An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08.8, and 23.02.3. Se descubrió un problema en MariaDB MaxScale antes del 23.02.3. Un usuario ingresa una contraseña cifrada en una línea de comando "maxctrl create service", pero esta contraseña luego se almacena en t... • https://jira.mariadb.org/browse/MXS-4681 • CWE-312: Cleartext Storage of Sensitive Information •