{"id":"GHSA-65g2-x53q-cmf6","summary":"Sensitive Terraform Output Values Printed At Info Logging Level In Kitchen-Terraform","details":"### Summary\n\nKitchen-Terraform v7.0.0 introduced a regression which caused all Terraform output values, including sensitive values, to be printed at the `info` logging level during the `kitchen converge` action. Prior to v7.0.0, the output values were printed at the `debug` level to avoid writing sensitive values to the terminal by default.\n\n### Original Report\n\n@brettcurtis:\n\u003e Hopefully, I'm not doing something stupid here, but I'm seeing sensitive outputs printed in the kitchen output. You can check this action for an example: https://github.com/osinfra-io/terraform-google-project/actions/runs/4700065515/jobs/8334277309#step:5:215\n\u003e\n\u003e It's not really a sensitive value just used it as an example.","aliases":["CVE-2023-30618"],"modified":"2023-11-06T05:25:56.175329Z","published":"2023-04-24T22:44:38Z","database_specific":{"cwe_ids":["CWE-532"],"severity":"LOW","github_reviewed":true,"github_reviewed_at":"2023-04-24T22:44:38Z","nvd_published_at":"2023-04-21T20:15:07Z"},"references":[{"type":"WEB","url":"https://github.com/newcontext-oss/kitchen-terraform/security/advisories/GHSA-65g2-x53q-cmf6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30618"},{"type":"WEB","url":"https://github.com/newcontext-oss/kitchen-terraform/commit/3d20d60e7a891e2dd747df995a31226fa0b4ac48"},{"type":"PACKAGE","url":"https://github.com/newcontext-oss/kitchen-terraform"},{"type":"WEB","url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kitchen-terraform/CVE-2023-30618.yml"}],"affected":[{"package":{"name":"kitchen-terraform","ecosystem":"RubyGems","purl":"pkg:gem/kitchen-terraform"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.0.1"}]}],"versions":["7.0.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/04/GHSA-65g2-x53q-cmf6/GHSA-65g2-x53q-cmf6.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N"}]}