CVE-2022-3474

 

Published at: - 26-10-2022 09:15

Last modified: - 26-10-2022 09:38

Total changes: - 1

Description

A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://github.com/bazelbuild/bazel/security/advisories/GHSA-mxr8-q875-rhwq

 

Keywords

NVD

 

CVE-2022-3474

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures