GO-2024-2899
Dashboard / Vulnerabilities / GO-2024-2899
Summary: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko
Details: apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko
References: https://github.com/chainguard-dev/apko/security/advisories/GHSA-v6mg-7f7p-qmqp, https://nvd.nist.gov/vuln/detail/CVE-2024-36127, https://github.com/chainguard-dev/apko/commit/2c0533e4d52e83031a04f6a83ec63fc2a11eff01
Affected packages
Package
Name: chainguard.dev/apko
Purl: pkg:golang/chainguard.dev/apko
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -0.14.5
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
