CVE-2023-22949

CVE-2023-22949 is a medium-severity vulnerability affecting TigerGraph Enterprise Free Edition 3.x and TigerGraph Cloud, where user credentials (username and password) are logged in an easily decodable base64 format for all authenticated GSQL access requests. This allows a malicious TigerGraph administrator to harvest user credentials, leading to a high impact on confidentiality. The attack vector is network-based with low complexity, requiring high privileges for exploitation. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.