Security Advisory

CVE-2022-3474

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-10-26 00:00:00
Last updated 2024-08-03 01:14:01
Assigner Google
State PUBLISHED

Description

A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.