GHSA-27rq-4943-qcwpMediumCVSS 5.5

Insertion of Sensitive Information into Log File in Hashicorp go-getter

Published
April 28, 2022
Last Modified
February 9, 2023

🔗 CVE IDs covered (1)

CVE-2022-29810 →

📋 Description

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to read the logfile.

🎯 Affected products1

  • go/github.com/hashicorp/go-getter:< 1.5.11

🔗 References (6)