CVE-2022-3474
Bazel leaks user credentials through the remote assets API
Résumé
Bazel leaks user credentials through the remote assets API
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov