CVE-2023-51390: Aiven Journalpump

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0.

Affected products

• Aiven Journalpump: before 2.5.0 (fixed in 2.5.0)

Published 2023-12-21. Last modified 2026-06-17.