Описание
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| aria2 | fixed | 1.34.0-4 | package |
Примечания
https://github.com/aria2/aria2/issues/1329
Masking of all authorization and cookie header fields (but not userinfo in URL):
https://github.com/aria2/aria2/commit/37368130ca7de5491a75fd18a20c5c5cc641824a
Связанные уязвимости
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.