-
Notifications
You must be signed in to change notification settings - Fork 61
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
data/reports: review 3 reports, add 2 reports
- data/reports/GO-2024-2491.yaml - data/reports/GO-2024-2698.yaml - data/reports/GO-2024-2785.yaml - data/reports/GO-2024-2912.yaml - data/reports/GO-2024-2918.yaml Updates #2491 Updates #2698 Updates #2785 Fixes #2912 Fixes #2918 Change-Id: I296bb2155b7a3ad7b8f8e7e3f1cc829a159c6cc8 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/595960 Auto-Submit: Tatiana Bradley <tatianabradley@google.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Zvonimir Pavlinovic <zpavlinovic@google.com>
- Loading branch information
Showing
10 changed files
with
343 additions
and
61 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,64 @@ | ||
| { | ||
| "schema_version": "1.3.1", | ||
| "id": "GO-2024-2912", | ||
| "modified": "0001-01-01T00:00:00Z", | ||
| "published": "0001-01-01T00:00:00Z", | ||
| "aliases": [ | ||
| "CVE-2021-41092", | ||
| "GHSA-99pg-grm5-qq3v" | ||
| ], | ||
| "summary": "Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli", | ||
| "details": "Docker CLI leaks private registry credentials to registry-1.docker.io in github.com/docker/cli", | ||
| "affected": [ | ||
| { | ||
| "package": { | ||
| "name": "github.com/docker/cli", | ||
| "ecosystem": "Go" | ||
| }, | ||
| "ranges": [ | ||
| { | ||
| "type": "SEMVER", | ||
| "events": [ | ||
| { | ||
| "introduced": "0" | ||
| }, | ||
| { | ||
| "fixed": "20.10.9+incompatible" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "ecosystem_specific": { | ||
| "imports": [ | ||
| { | ||
| "path": "github.com/docker/cli/command", | ||
| "symbols": [ | ||
| "GetDefaultAuthConfig", | ||
| "RegistryAuthenticationPrivilegedFunc" | ||
| ] | ||
| }, | ||
| { | ||
| "path": "github.com/docker/cli/command/registry", | ||
| "symbols": [ | ||
| "runLogin" | ||
| ] | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| ], | ||
| "references": [ | ||
| { | ||
| "type": "ADVISORY", | ||
| "url": "https://github.com/docker/cli/security/advisories/GHSA-99pg-grm5-qq3v" | ||
| }, | ||
| { | ||
| "type": "FIX", | ||
| "url": "https://github.com/docker/cli/commit/893e52cf4ba4b048d72e99748e0f86b2767c6c6b" | ||
| } | ||
| ], | ||
| "database_specific": { | ||
| "url": "https://pkg.go.dev/vuln/GO-2024-2912", | ||
| "review_status": "REVIEWED" | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,87 @@ | ||
| { | ||
| "schema_version": "1.3.1", | ||
| "id": "GO-2024-2918", | ||
| "modified": "0001-01-01T00:00:00Z", | ||
| "published": "0001-01-01T00:00:00Z", | ||
| "aliases": [ | ||
| "CVE-2024-35255", | ||
| "GHSA-m5vv-6r4h-3vj9" | ||
| ], | ||
| "summary": "Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity", | ||
| "details": "Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity", | ||
| "affected": [ | ||
| { | ||
| "package": { | ||
| "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity", | ||
| "ecosystem": "Go" | ||
| }, | ||
| "ranges": [ | ||
| { | ||
| "type": "SEMVER", | ||
| "events": [ | ||
| { | ||
| "introduced": "0" | ||
| }, | ||
| { | ||
| "fixed": "1.6.0" | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "ecosystem_specific": { | ||
| "imports": [ | ||
| { | ||
| "path": "github.com/Azure/azure-sdk-for-go/sdk/azidentity", | ||
| "symbols": [ | ||
| "AzurePipelinesCredential.GetToken", | ||
| "ChainedTokenCredential.GetToken", | ||
| "ClientAssertionCredential.GetToken", | ||
| "ClientCertificateCredential.GetToken", | ||
| "ClientSecretCredential.GetToken", | ||
| "DefaultAzureCredential.GetToken", | ||
| "EnvironmentCredential.GetToken", | ||
| "ManagedIdentityCredential.GetToken", | ||
| "NewDefaultAzureCredential", | ||
| "NewManagedIdentityCredential", | ||
| "OnBehalfOfCredential.GetToken", | ||
| "WorkloadIdentityCredential.GetToken", | ||
| "confidentialClient.GetToken", | ||
| "managedIdentityClient.authenticate", | ||
| "managedIdentityClient.createAccessToken", | ||
| "managedIdentityClient.createAppServiceAuthRequest", | ||
| "managedIdentityClient.createAzureArcAuthRequest", | ||
| "managedIdentityClient.createAzureMLAuthRequest", | ||
| "managedIdentityClient.createCloudShellAuthRequest", | ||
| "managedIdentityClient.createIMDSAuthRequest", | ||
| "managedIdentityClient.createServiceFabricAuthRequest", | ||
| "managedIdentityClient.getAzureArcSecretKey", | ||
| "newManagedIdentityClient" | ||
| ] | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| ], | ||
| "references": [ | ||
| { | ||
| "type": "ADVISORY", | ||
| "url": "https://github.com/advisories/GHSA-m5vv-6r4h-3vj9" | ||
| }, | ||
| { | ||
| "type": "FIX", | ||
| "url": "https://github.com/Azure/azure-sdk-for-go/commit/50774cd9709905523136fb05e8c85a50e8984499" | ||
| }, | ||
| { | ||
| "type": "WEB", | ||
| "url": "https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4806#issuecomment-2178960340" | ||
| }, | ||
| { | ||
| "type": "WEB", | ||
| "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255" | ||
| } | ||
| ], | ||
| "database_specific": { | ||
| "url": "https://pkg.go.dev/vuln/GO-2024-2918", | ||
| "review_status": "REVIEWED" | ||
| } | ||
| } |
Oops, something went wrong.