Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45340

Опубликовано: 28 янв. 2025
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.

EPSS

Процентиль: 35%
0.00142
Низкий

8.8 High

CVSS3

Дефекты

Связанные уязвимости

CVSS3: 8.8
ubuntu
12 месяцев назад

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.

CVSS3: 7.5
redhat
12 месяцев назад

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.

CVSS3: 8.8
debian
12 месяцев назад

Credentials provided via the new GOAUTH feature were not being properl ...

CVSS3: 8.8
github
12 месяцев назад

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.

CVSS3: 7.1
fstec
около 1 года назад

Уязвимость компонента cmd/go функции GOAUTH библиотеки go языка программирования Golang, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 35%
0.00142
Низкий

8.8 High

CVSS3

Дефекты