Intel

AIKIDO-2024-10296

DatadogInternal is vulnerable to Exposure of Sensitive Information

Exposure of Sensitive Information Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Sep 26, 2024

15

Low Risk

This Affects:

swiftDatadogInternal
2.0.0 - 2.17.0
Fixed in 2.18.0
Are you affected? Scan for Free

TL;DR

Affected versions of the package may expose sensitive information. The "Show password" feature reveals sensitive text in a Session Replay.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

DatadogInternal is vulnerable to Exposure of Sensitive Information in versions 2.0.0 - 2.17.0.

How to fix this

Upgrade the DatadogInternal library to the patch version.