GHSA-RCVG-JJ3G-RJ7C Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints

The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the application database, and the associated endpoints are no...

CVE-2024-35189

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve "ConnectionConfiguration" records and their associated "secrets" which can contain sensitive data e.g. passwords, private keys, etc.. These "secrets" are stored encrypted at rest in t...

CVE-2024-35189

Fides vulnerability CVE-2024-35189 affects the BigQuery connection configuration secrets, where a bug in masking nested sensitive fields allowed plaintext exposure via API endpoints. Affected component: BigQuerySchema secrets structure containing keyfile_creds.private_key exposed in plaintext acr...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189: Insertion of Sensitive Information Into Sent Data

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

PT-2024-26368

Name of the Vulnerable Software and Affected Versions Fides versions prior to 2.37.0 Description The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data. These secrets are stored encrypted at rest, a...

Malicious code in vscode-bigquery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fcbaeb030fbe447717dc360ccef29f0624e6c166e7ad6b8ab5670c617009abf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6973 Malicious code in vscode-bigquery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fcbaeb030fbe447717dc360ccef29f0624e6c166e7ad6b8ab5670c617009abf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-bigquery-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4effea0e9c65fae925ae0caf8f8786d929e13689c9a04786fa4b264ee26b3689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3412 Malicious code in google-bigquery-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4effea0e9c65fae925ae0caf8f8786d929e13689c9a04786fa4b264ee26b3689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A scanning tool for open-sourced software packages? Yes, please!

The Open Source Security Foundation OpenSSF, a collective of industry leaders aimed at improving the security of open-source software OSS, recently announced the release of a prototype tool that scans for malicious packages in open source repositories. This tool, conveniently called Package...

CVE-2021-22571

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

CVE-2021-22571

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

Design/Logic Flaw

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

CVE-2021-22571 Information Leak in SA360-webquery-bigquery through read on /tmp

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

CVE-2021-22571 Information Leak in SA360-webquery-bigquery through read on /tmp

A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above...

Google SA360 WebQuery to BigQuery Exporter安全漏洞

Google SA360 WebQuery to BigQuery Exporter is an open source tool for importing Search Ads 360 Webquery reports into BigQuery from Google, Inc. A security vulnerability exists in versions prior to Google SA360 WebQuery to BigQuery Exporter 1.0.3, which originates from a local attacker being able ...