Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2986-5hcf-cm8g

Опубликовано: 20 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image

When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image

EPSS

Процентиль: 7%
0.00028
Низкий

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 5.5
nvd
около 4 лет назад

When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image

EPSS

Процентиль: 7%
0.00028
Низкий

Дефекты

CWE-312