Information Disclosure

🗓️ 08 Mar 2023 11:33:04Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 34 Views

Information Disclosure in github.com/moby/buildkit with Git URL containing credentials

Reporter	Title	Published	Views	Family All 49
AlpineLinux	CVE-2023-26054	6 Mar 202318:05	–	alpinelinux
Circl	CVE-2023-26054	6 Mar 202322:13	–	circl
CNNVD	BuildKit 信息泄露漏洞	6 Mar 202300:00	–	cnnvd
CVE	CVE-2023-26054	6 Mar 202318:05	–	cve
Cvelist	CVE-2023-26054 Credentials inlined to Git URLs could end up in provenance attestation in BuildKit	6 Mar 202318:05	–	cvelist
EUVD	EUVD-2023-1011	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 38 Update: moby-engine-24.0.5-1.fc38	30 Aug 202301:37	–	fedora
Fedora	[SECURITY] Fedora 37 Update: moby-engine-24.0.5-1.fc37	5 Sep 202300:47	–	fedora
Fedora	[SECURITY] Fedora 39 Update: moby-engine-24.0.5-1.fc39	15 Sep 202319:03	–	fedora
Tenable Nessus	Fedora 38 : moby-engine (2023-9f5f1ef40a)	30 Aug 202300:00	–	nessus

Vulners

Node

docker dockerMatch20.10.7-r1go

AND

docker dockerMatch20.10.17-r1go

AND

docker dockerMatch20.10.4-r0go

AND

docker dockerMatch20.10.18-r0go

AND

docker dockerMatch20.10.17-r0go

AND

docker dockerMatch20.10.5-r0go

AND

docker dockerMatch20.10.5-r1go

AND

docker dockerMatch20.10.13-r0go

AND

docker dockerMatch20.10.21-r0go

AND

docker dockerMatch20.10.10-r0go

AND

docker dockerMatch20.10.6-r0go

AND

docker dockerMatch20.10.15-r0go

AND

docker dockerMatch20.10.14-r1go

AND

docker dockerMatch20.10.9-r0go

AND

docker dockerMatch20.10.6-r1go

AND

docker dockerMatch20.10.12-r0go

AND

docker dockerMatch20.10.13-r1go

AND

docker dockerMatch19.03.8-r0go

AND

docker dockerMatch20.10.20-r0go

AND

docker dockerMatch20.10.17-r2go

AND

docker dockerMatch19.03.6-r2go

AND

docker dockerMatch20.10.19-r0go

AND

docker dockerMatch20.10.11-r0go

AND

docker dockerMatch19.03.7-r0go

AND

docker dockerMatch20.10.17-r3go

AND

docker dockerMatch20.10.22-r0go

AND

docker dockerMatch20.10.5-r2go

AND

docker dockerMatch20.10.12-r1go

AND

docker dockerMatch19.03.10-r0go

AND

docker dockerMatch20.10.8-r1go

AND

docker dockerMatch19.03.8-r1go

AND

docker dockerMatch20.10.16-r0go

AND

docker dockerMatch20.10.8-r0go

AND

docker dockerMatch23.0.0-r1go

AND

docker dockerMatch20.10.15-r1go

AND

docker dockerMatch20.10.21-r2go

AND

docker dockerMatch23.0.1-r1go

AND

docker dockerMatch20.10.14-r0go

AND

docker dockerMatch20.10.23-r0go

AND

docker dockerMatch20.10.18-r1go

AND

docker dockerMatch23.0.0-r0go

AND

docker dockerMatch20.10.21-r1go

AND

alpinelinux alpine_linuxMatchedge

mobyproject github.com/moby/buildkitRangev0.10.2–0.10.2go

Source	Link
github	www.github.com/moby/buildkit/commit/3abd1ef0c195cdc078d1657cb50f62a2cdc26f8f
github	www.github.com/advisories/GHSA-gc89-7gcr-jxqc
github	www.github.com/moby/buildkit/commit/75123c696506bdbca1ed69906479e200f1b62604
github	www.github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/

19 Sep 2023 05:33Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

EPSS0.01033

SSVC

vulnerability buildkit access repositories