1 matches found
scs-library-client may leak user credentials to third-party service via HTTP redirect
Impact When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirects the...
7.6CVSS1.8AI score0.00709EPSS
SaveExploits0References7Affected Software1
20