CVE-2022-31098

🗓️ 27 Jun 2022 22:05:11Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 409 Views

Vulnerability in Weave GitOps enables authenticated remote attackers to view sensitive cluster configurations, including service account tokens, via pod logs or external log storage

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2022-31098	28 Jun 202202:35	–	circl
CNNVD	Weave GitOps 日志信息泄露漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Weave GitOps Log Information Disclosure Vulnerability	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-31098 Weave GitOps leaked cluster credentials into logs on connection errors	27 Jun 202222:05	–	cvelist
EUVD	EUVD-2022-6189	3 Oct 202520:07	–	euvd
Github Security Blog	Weave GitOps leaked cluster credentials into logs on connection errors	23 Jun 202217:40	–	github
NVD	CVE-2022-31098	27 Jun 202222:15	–	nvd
OSV	CVE-2022-31098 Weave GitOps leaked cluster credentials into logs on connection errors	27 Jun 202222:05	–	osv
OSV	GHSA-XGGC-QPRG-X6MW Weave GitOps leaked cluster credentials into logs on connection errors	23 Jun 202217:40	–	osv
OSV	GO-2022-0502 Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops	21 Aug 202415:11	–	osv

NVD

Vulners

Node

weave weave_gitopsRange<0.8.1

weave weave_gitopsMatch0.8.1rc1

weave weave_gitopsMatch0.8.1rc2

weave weave_gitopsMatch0.8.1rc3

weave weave_gitopsMatch0.8.1rc4

weave weave_gitopsMatch0.8.1rc5

[
  {
    "product": "weave-gitops",
    "vendor": "weaveworks",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.8.1-rc.6"
      }
    ]
  }
]

Source	Link
github	www.github.com/weaveworks/weave-gitops/commit/567356f471353fb5c676c77f5abc2a04631d50ca
github	www.github.com/weaveworks/weave-gitops/security/advisories/GHSA-xggc-qprg-x6mw