Lucene search

K
osvGoogleOSV:GHSA-27RQ-4943-QCWP
HistoryApr 28, 2022 - 12:00 a.m.

Insertion of Sensitive Information into Log File in Hashicorp go-getter

2022-04-2800:00:35
Google
osv.dev
23

0.0004 Low

EPSS

Percentile

5.1%

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to read the logfile.

CPENameOperatorVersion
github.com/hashicorp/go-getterlt1.5.11

0.0004 Low

EPSS

Percentile

5.1%