Lucene search
+L

9 matches found

osv_bit
osv_bit
•added 2025/01/30 7:13 p.m.•13 views

BIT-GOLANG-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS6.9AI score0.00706EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2025/01/28 2:15 a.m.•12 views

DEBIAN-CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS6.9AI score0.00706EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/01/28 2:15 a.m.•19 views

UBUNTU-CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS6.9AI score0.00706EPSS
SaveExploits0References5
Mend
Mend
•added 2025/01/28 1:03 a.m.•12 views

CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS6.9AI score0.00706EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/28 1:03 a.m.•160 views

CVE-2024-45340

The Golang programming language library is vulnerable to a credential leak in the cmd/go component's GOAUTH function. The issue stems from insufficient protection for registration data where credentials provided via the GOAUTH feature are not properly segmented by domain. This flaw allows a malic...

8.8CVSS6.9AI score0.00706EPSS
SaveExploits0References4
osv_go
osv_go
•added 2025/01/28 12:47 a.m.•47 views

GO-2025-3383 GOAUTH credential leak in cmd/go

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS6.9AI score0.00706EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•7 views

CVE-2024-45340: Undefined Security Weakness

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

8.8CVSS7AI score0.00706EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/01/25 4:00 a.m.•13 views

SUSE CVE-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

7.7CVSS6.9AI score0.00706EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•18 views

PT-2025-2691 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue concerns the new GOAUTH feature, where credentials were not properly segmented by domain. This allowed a malicious server to request credentials it should not have access to. By...

10CVSS6.5AI score0.02728EPSS
SaveExploits7References172
Rows per page
Query Builder