1 matches found
ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command
Summary The issue here is that we pass the secret content as one of the args via CLI. This issue may affect any of our charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processing subprocess.CalledProcessError. There are two points that may log this command, in...
4.4CVSS7.3AI score0.00198EPSS
SaveExploits0References4Affected Software1
20