Beveiligingsadvies

CVE-2024-45340

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-28 01:03:24
Laatst bijgewerkt 2025-01-30 19:14:21
Toegewezen door Go
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.