Information Exposure

Overview blackduck-c-cpp is a Scanning for c/c++ projects using blackduck and coverity tools Affected versions of this package are vulnerable to Information Exposure inheriting sensitive environment variables by subprocesses during build capture and signature scanning. An attacker can access...