Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 12.33.0, 13.26.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls made via Spring's RestClient and logs the full request body, response body, and response headers. When an error response is received, this information is included in the thrown HttpClientErrorException message, which is logged at ERROR level by Spring's default exception handling — regardless of the application's DEBUG log level setting. This vulnerability is fixed in 12.33.0 and 13.26.0.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- valtimo-platform valtimo
From 12.4.0 · fixed in 12.33.0; From 13.0.0 · fixed in 13.26.0
- com.ritense.valtimo web
From 12.4.0 · fixed in 12.33.0; From 13.0.0 · fixed in 13.26.0
- com.ritense.valtimo:webMaven
From 12.4.0 · fixed in 12.33.0
- com.ritense.valtimo:webMaven
From 13.0.0 · fixed in 13.26.0