govulncheck-vulndb-0.0.20241120T172248-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241120T172248-1.1 on GA media Announcement ID: openSUSE-SU-2024:14515-1 Rating: moderate Cross-References: CVE-2024-52009 CVE-2024-8986 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security...

CVE-2024-52009

creationtimestamp| type| source ---|---|--- 2024-11-09 00:44:25+00:00| seen| https://t.me/cvedetector/10242...

CVE-2024-52009 Git credentials are exposed in atlantis logs

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. Atlantis logs contains GitHub credentials tokens ghs... when they are rotated. This enables an attacker able to read these logs to impersonate Atlantis application and to perform actions on...