Lucene search

GoogleOSV:CVE-2022-39397

HistoryNov 22, 2022 - 9:15 p.m.

CVE-2022-39397

2022-11-2221:15:10

Google

osv.dev

aliyun cloud

oss

rust

secret disclosure

vulnerability

patched

5.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

CPENameOperatorVersion
oss-rseq0.2.5
oss-rseq0.5.0
oss-rseq0.3.1
oss-rseq0.8.0
oss-rseq0.7.2
oss-rseq0.1.0
oss-rseq0.6.0
oss-rseqdev-0.2.0
oss-rseq0.7.1
oss-rseq0.2.4

Name	Operator	Version
oss-rs	eq	0.2.5
oss-rs	eq	0.5.0
oss-rs	eq	0.3.1
oss-rs	eq	0.8.0
oss-rs	eq	0.7.2
oss-rs	eq	0.1.0
oss-rs	eq	0.6.0
oss-rs	eq	dev-0.2.0
oss-rs	eq	0.7.1
oss-rs	eq	0.2.4

Rows per page:

1-10 of 261

References

github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29

github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc

5.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

Related for OSV:CVE-2022-39397