title: Credentials leak
description: Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.
problem types: CWE-522 Insufficiently Protected Credentials
affected:
{
product: Apache Superset
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 1.3.1, status: affected, version: Apache Superset, versionType: custom
}
workarounds: Upgrade to Apache Superset 1.3.2 or higher