Lucene search
GoogleOSV:GO-2023-1497HistoryFeb 01, 2023 - 11:23 p.m.
Leaked user credentials in github.com/sylabs/scs-library-client
2023-02-0123:23:36
Google
osv.dev
14
github
credentials
leakage
authentication
client
library service
s3
storage provider
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
41.0%
When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider.
Related
nessus
nessus
Fedora 36 : apptainer (2023-677d58bb20)
2023-02-22 00:00:00
Fedora 37 : apptainer (2023-01ff262091)
2023-02-22 00:00:00
alpinelinux
alpinelinux
CVE-2022-23538
2023-01-17 21:15:11
debiancve
debiancve
CVE-2022-23538
2023-01-17 21:15:11
openvas
openvas
Fedora: Security Advisory for apptainer (FEDORA-2023-677d58bb20)
2023-02-23 00:00:00
Fedora: Security Advisory for apptainer (FEDORA-2023-01ff262091)
2023-02-23 00:00:00
ubuntucve
ubuntucve
CVE-2022-23538
2023-01-17 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: apptainer-1.1.6-1.fc36
2023-02-22 11:10:37
[SECURITY] Fedora 37 Update: apptainer-1.1.6-1.fc37
2023-02-22 10:16:22
prion
prion
Authorization
2023-01-17 21:15:00
veracode
veracode
Information Disclosure
2023-01-24 05:37:21
osv
osv
scs-library-client may leak user credentials to third-party service via HTTP redirect
2023-01-20 22:38:04
apptainer-1.1.6-1.1 on GA media
2024-06-15 00:00:00
CVE-2022-23538
2023-01-17 21:15:11
cvelist
cvelist
nvd
nvd
CVE-2022-23538
2023-01-17 21:15:11
cve
cve
CVE-2022-23538
2023-01-17 21:15:11
github
github
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
41.0%
Related for OSV:GO-2023-1497