Lucene search
+L

9 matches found

osv-bit
osv-bit
•added 2025/01/30 7:13 p.m.•10 views

BIT-GOLANG-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS7.8AI score0.00711EPSS
SaveExploits0References4
osv-debian
osv-debian
•added 2025/01/28 2:15 a.m.•8 views

DEBIAN-CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS7AI score0.00711EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2025/01/28 2:15 a.m.•15 views

UBUNTU-CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS7.1AI score0.00711EPSS
SaveExploits0References5
CVE
CVE
•added 2025/01/28 1:03 a.m.•151 views

CVE-2024-45340

The Golang programming language library is vulnerable to a credential leak in the cmd/go component's GOAUTH function. The issue stems from insufficient protection for registration data where credentials provided via the GOAUTH feature are not properly segmented by domain. This flaw allows a malic...

8.8CVSS6.6AI score0.00711EPSS
SaveExploits0References4
Mend
Mend
•added 2025/01/28 1:03 a.m.•4 views

CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS0.00711EPSS
SaveExploits0References4
osv-go
osv-go
•added 2025/01/28 12:47 a.m.•40 views

GO-2025-3383 GOAUTH credential leak in cmd/go

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS7.8AI score0.00711EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•5 views

CVE-2024-45340: Undefined Security Weakness

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS5.8AI score0.00711EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/01/25 4:00 a.m.•11 views

SUSE CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

7.7CVSS7AI score0.00711EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•14 views

PT-2025-2691 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue concerns the new GOAUTH feature, where credentials were not properly segmented by domain. This allowed a malicious server to request credentials it should not have access to. By...

10CVSS6.6AI score0.02728EPSS
SaveExploits7References172
Rows per page
Query Builder