Design/Logic Flaw

2022-07-2016:15:00

PRIOn knowledge base

www.prio-n.com

anchore enterprise

anchorectl

credentials

sbom

nvd

upgrade

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl. Users of anchorectl version 0.1.4 should upgrade to anchorectl version 0.1.5 to resolve this issue.

CPENameOperatorVersion
anchorelt4.0.1
anchorectllt0.1.5

CPE	Name	Operator	Version
	anchore	lt	4.0.1
	anchorectl	lt	0.1.5

References

docs.anchore.com/current/docs/releasenotes/401/