Information Disclosure

2022-10-2019:55:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

git

vulnerability

information disclosure

local attacker

symbolic link

restricted component

confidential information

software

0.001 Low

EPSS

Percentile

41.7%

JSON

git is vulnerable to information disclosure. A local attacker is able to convinces a victim to clone a repository with a symbolic link pointing at a restricted component on the victim’s machine, which allows the attacker to gain access to confidential information.

CPENameOperatorVersion
git:edgeeq2.26.2-r0
git:edgeeq2.33.0-r2
git:edgeeq2.25.2-r0
git:edgeeq2.36.1-r0
git:edgeeq2.37.0-r0
git:edgeeq2.35.0-r0
git:edgeeq2.30.2-r0
git:edgeeq2.32.0-r2
git:edgeeq2.31.1-r1
git:edgeeq2.26.1-r0

Name	Operator	Version
git:edge	eq	2.26.2-r0
git:edge	eq	2.33.0-r2
git:edge	eq	2.25.2-r0
git:edge	eq	2.36.1-r0
git:edge	eq	2.37.0-r0
git:edge	eq	2.35.0-r0
git:edge	eq	2.30.2-r0
git:edge	eq	2.32.0-r2
git:edge	eq	2.31.1-r1
git:edge	eq	2.26.1-r0