CVE-2022-23538: go client for Singularity Container Services (SCS) leaks HTTP Authorization header to S3
Reporter | Title | Published | Views | Family All 20 |
---|---|---|---|---|
![]() | Fedora 37 : apptainer (2023-01ff262091) | 22 Feb 202300:00 | – | nessus |
![]() | Fedora 36 : apptainer (2023-677d58bb20) | 22 Feb 202300:00 | – | nessus |
![]() | CVE-2022-23538 | 17 Jan 202321:15 | – | alpinelinux |
![]() | Leaked user credentials in github.com/sylabs/scs-library-client | 1 Feb 202323:23 | – | osv |
![]() | scs-library-client may leak user credentials to third-party service via HTTP redirect | 20 Jan 202322:38 | – | osv |
![]() | OPENSUSE-SU-2024:12694-1 apptainer-1.1.6-1.1 on GA media | 15 Jun 202400:00 | – | osv |
![]() | CVE-2022-23538 | 17 Jan 202321:15 | – | osv |
![]() | OPENSUSE-SU-2024:14059-1 singularity-ce-4.1.3-1.1 on GA media | 20 Jun 202400:00 | – | osv |
![]() | CVE-2022-23538 | 17 Jan 202300:00 | – | ubuntucve |
![]() | CVE-2022-23538 | 17 Jan 202321:15 | – | debiancve |
[
{
"vendor": "sylabs",
"product": "scs-library-client",
"versions": [
{
"version": "< 1.34",
"status": "affected"
},
{
"version": ">= 1.4.0, < 1.4.2",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo