2 matches found
MGASA-2019-0036 Updated aria2 package fixes security vulnerability
It was observed that URL's which gets downloaded via "--log=" attribute stores sensitive information. This update fixes that...
7.8CVSS7.5AI score0.00351EPSS
SaveExploits1References2
PT-2018-11249
Name of the Vulnerable Software and Affected Versions Zuul versions prior to 3.1.0 Description An issue was discovered where if nodes become offline during the build, the no log attribute of a task is ignored. This could lead to accidentally leaking credentials or secrets, particularly when the...
9.8CVSS0.01853EPSS
SaveExploits0References5
20