CVE-2022-1766 in Anchoreinformation

Résumé

par MITRE • 20/07/2022

Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl. Users of anchorectl version 0.1.4 should upgrade to anchorectl version 0.1.5 to resolve this issue.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Réserver

17/05/2022

Divulgation

20/07/2022

Modérer

accepté

Entrée

VDB-204685

CPE

prêt

CWE

CWE-522 (confirmé)

CVSS

7.5 (NVD)

EPSS

0.00666

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-1766
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-1766
CVE Details	https://www.cvedetails.com/cve/CVE-2022-1766/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!