{"id":"EUVD-2023-1355","enisaUuid":"5ad1e3e6-cb79-3e69-99b9-028267114da0","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user\u0027s AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG\u003dtrace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n","datePublished":"Apr 19, 2023, 5:18:54 PM","dateUpdated":"Feb 5, 2025, 2:56:14 PM","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9\n","aliases":"CVE-2023-30610\nGHSA-mjv9-vp6w-3rc9\n","assigner":"GitHub_M","epss":0.21,"enisaIdProduct":[{"id":"0196405d-a3f7-3f3a-b38f-17c66439e123","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.15.0, \u003c 0.15.1"},{"id":"0744f9ee-ea15-3565-bce6-da60fe1fd9d8","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.47.0, \u003c 0.47.1"},{"id":"14bb1456-44e4-3ee8-bafb-19d1a5193a6c","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.50.0, \u003c 0.51.1"},{"id":"20634f3b-031a-326b-8d9a-fd24cd8023b5","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.3.0, \u003c 0.3.1"},{"id":"25120ba6-adfb-352d-88cf-3a160d87ce95","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.55.0, \u003c 0.55.1"},{"id":"2a96a001-2810-30dd-9447-3e97f8202ae5","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.13.0, \u003c 0.13.1"},{"id":"314f4025-3cac-3bb3-b4bf-492ac9368a78","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.48.0, \u003c 0.48.1"},{"id":"34895eda-168b-31cf-a5bb-25d7ff6c2b1f","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.9.0, \u003c 0.9.1"},{"id":"570213aa-2b19-3864-8cab-2010dca44075","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.46.0, \u003c 0.46.1"},{"id":"57fa547c-c5fb-387e-bad9-84f131081963","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.52.0, \u003c 0.52.1,"},{"id":"5d966f5b-7788-3c61-abc5-d116386f1762","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.14.0, \u003c 0.14.1"},{"id":"625b1256-2f94-3062-90c2-3c064d6c2c38","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.7.0, \u003c 0.7.1"},{"id":"6bc28400-ce3e-344d-a02e-e6c22a58d7bf","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.11.0, \u003c 0.11.1"},{"id":"7396f5c1-293c-3abe-bc2b-de8cbe6a9dc9","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.2.0, \u003c 0.2.1"},{"id":"9f4aa8ce-a8c8-3d64-b182-de17ed84877c","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.49.0, \u003c 0.49.1"},{"id":"a5e166a5-8e39-3d22-a4ca-5cb3d229d3a3","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.5.2, \u003c 0.5.3"},{"id":"a934df78-5032-3fa6-a3e4-14cb244c601f","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.12.0, \u003c 0.12.1"},{"id":"cf9355fe-e0a8-3d27-87ca-12ec1d3551d9","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.8.0, \u003c 0.8.1"},{"id":"d28d2a4a-f463-319f-aa86-70bbeec9efcc","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.10.1, \u003c 0.10.2"},{"id":"d5734a40-235d-31da-98a9-564791379977","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.53.1, \u003c 0.53.2"},{"id":"e465dae3-417e-3301-b4e5-be85870bb985","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.54.1, \u003c 0.54.2"},{"id":"f0e80aea-5bb0-3da4-b88b-e22fb786e4b3","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.4.1, \u003c 0.4.2"},{"id":"f163c36b-beee-39ec-b1e9-4bff09588891","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.6.0, \u003c 0.6.1"}],"enisaIdVendor":[{"id":"47b2195e-684e-3d99-991c-3136124233dd","vendor":{"name":"awslabs"}}],"enisaIdVulnerability":[{"id":"8bc098be-18b5-3162-99de-2f0ab201bd7f","vulnerability":{"id":"GHSA-mjv9-vp6w-3rc9","description":"AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending","datePublished":"Apr 26, 2023, 4:01:10 PM","dateUpdated":"Apr 6, 2026, 5:17:04 PM","baseScore":null,"references":"https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-30610\nhttps://github.com/awslabs/aws-sdk-rust\nhttps://rustsec.org/advisories/RUSTSEC-2023-0125.html\n","enisa_id":"EUVD-2023-1355\n","aliases":"GHSA-mjv9-vp6w-3rc9\nCVE-2023-30610\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:49:57 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"de291d53-aaf1-36a0-9608-6d2b1bcc7a9b","vulnerability":{"id":"CVE-2023-30610","description":"aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user\u0027s AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG\u003dtrace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n","datePublished":"Apr 19, 2023, 5:18:54 PM","dateUpdated":"Feb 5, 2025, 2:56:14 PM","status":"PUBLISHED","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9\n","enisa_id":"EUVD-2023-1355\n","assigner":"GitHub_M","epss":0.21,"dataProcessed":"Nov 7, 2026, 7:20:08 AM","vulnerabilityProduct":[{"id":"02b55cd1-1fe9-3490-af42-d9edc8491dc0","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.47.0, \u003c 0.47.1"},{"id":"03c447ec-f2f4-4ec0-9d97-611b8783267a","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.13.0, \u003c 0.13.1"},{"id":"098b4381-7a69-4452-a0ff-7a13140043b7","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.47.0, \u003c 0.47.1"},{"id":"0adc6900-c308-4333-9e80-820c5eefdc6c","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.52.0, \u003c 0.52.1,"},{"id":"0d29779e-7450-386b-a597-fc06e5e8868b","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.10.1, \u003c 0.10.2"},{"id":"0e5e437e-28d0-35c6-b14b-5124a04d3e5b","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.14.0, \u003c 0.14.1"},{"id":"1765c387-52fc-3a87-a0dd-3ad0fee6645c","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.12.0, \u003c 0.12.1"},{"id":"24c0a99b-b062-406e-8214-2f49b8a127f6","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.8.0, \u003c 0.8.1"},{"id":"28f4559b-6f56-4480-91d1-206c8b24ec4a","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.14.0, \u003c 0.14.1"},{"id":"2e7b0c94-562c-316a-8dc5-b1148c21c249","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.49.0, \u003c 0.49.1"},{"id":"36e2a778-9cd2-385b-b142-aa8663d3361d","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.6.0, \u003c 0.6.1"},{"id":"3bcdd939-8eeb-4074-b094-2720206f3bdd","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.54.1, \u003c 0.54.2"},{"id":"47a68d5d-00cf-3003-8605-853aaf7850e0","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.9.0, \u003c 0.9.1"},{"id":"51a5134f-de89-4bee-a1be-00c59f28717d","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.49.0, \u003c 0.49.1"},{"id":"5e8a8526-74cb-4095-9a43-1bd45c993021","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.2.0, \u003c 0.2.1"},{"id":"61b45c47-f3fc-45c2-8176-02f7eb58ae59","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.55.0, \u003c 0.55.1"},{"id":"62fd5d0d-a985-46ff-8d47-98beed1e1782","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.11.0, \u003c 0.11.1"},{"id":"65d3aeec-2195-3755-8dca-770f138b5eb1","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.4.1, \u003c 0.4.2"},{"id":"678af53d-f3fc-3101-a726-dda362d01654","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.8.0, \u003c 0.8.1"},{"id":"696128a0-466c-33d8-8706-c10365eb1010","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.55.0, \u003c 0.55.1"},{"id":"6ec07320-338d-40b2-b438-1b23efc7b549","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.46.0, \u003c 0.46.1"},{"id":"83c7aace-560a-4b08-b376-65163147440e","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.48.0, \u003c 0.48.1"},{"id":"8a8f79ef-80c3-31a3-859f-29ace6957698","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.11.0, \u003c 0.11.1"},{"id":"8fa40ea4-b71a-34b1-b30c-ee70696ce183","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.7.0, \u003c 0.7.1"},{"id":"944a6557-3baf-4ed4-b9f5-833799edff25","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.6.0, \u003c 0.6.1"},{"id":"9621c96f-3700-4f1f-8e92-c9f48a2010a0","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.3.0, \u003c 0.3.1"},{"id":"97e749e3-9296-4c23-ac81-b5ff1f9707f8","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.53.1, \u003c 0.53.2"},{"id":"a0ac0b46-8c92-3f55-8a58-ccc3669c22fa","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.13.0, \u003c 0.13.1"},{"id":"aa93b213-67e0-433c-a248-d81ad2cb9e72","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.4.1, \u003c 0.4.2"},{"id":"b250b50e-cc19-32d0-9c85-0b939e521a2b","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.52.0, \u003c 0.52.1,"},{"id":"b38a5de3-d49c-385c-9c26-003737856eed","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.15.0, \u003c 0.15.1"},{"id":"b55cdd55-7536-3a0a-bd02-b355bbf690c3","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.50.0, \u003c 0.51.1"},{"id":"b6c8083a-b8cc-37f9-b224-e8716a7c7b89","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.5.2, \u003c 0.5.3"},{"id":"bb1d3b8d-f7aa-4bf7-9115-5d25d15ae120","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.9.0, \u003c 0.9.1"},{"id":"bd6c3c66-1349-42e5-b955-5fcd79caee3a","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.10.1, \u003c 0.10.2"},{"id":"bfc9f63a-73b5-49b8-a636-0e85709ea5c6","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.50.0, \u003c 0.51.1"},{"id":"c3b71649-53b8-4616-a163-3f8590580212","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.12.0, \u003c 0.12.1"},{"id":"c3ece540-36b5-4e16-912f-49f756751267","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.5.2, \u003c 0.5.3"},{"id":"c4d0c1e7-904e-40df-a85f-db39736b28fd","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.15.0, \u003c 0.15.1"},{"id":"d1b0400e-9619-38ec-a48d-4dcd67b1b987","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.46.0, \u003c 0.46.1"},{"id":"d2b897de-ec15-3778-8fe6-d674a29f9f86","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.53.1, \u003c 0.53.2"},{"id":"d5dda033-b4a1-38d5-858d-7b69f349dcc6","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.54.1, \u003c 0.54.2"},{"id":"e3989468-804c-497d-b197-c4ea21aca7b1","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.7.0, \u003c 0.7.1"},{"id":"e9c22c72-e22c-3b05-a00e-d87d4bca97fa","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.2.0, \u003c 0.2.1"},{"id":"ea14b396-2b62-3e5a-8fd6-1e5c2bfbc1be","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.48.0, \u003c 0.48.1"},{"id":"f9fdcf0f-7f60-346f-9ed8-0783d40e7daf","product":{"name":"aws-sdk-rust","vendor":{"name":"awslabs"}},"product_version":"0.3.0, \u003c 0.3.1"}],"vulnerabilityVendor":[{"id":"e3e646a6-36fc-3d06-a061-a2e2a6762b28","vendor":{"name":"awslabs"}}]}}],"enisaIdAdvisory":[]}