CVE-2022-39397 - Exposure of sensitive information in aliyun-oss-client

Back Back to CVE browser

MEDIUM

Exposure of sensitive information in aliyun-oss-client

Published Nov 22, 2022

5.6

MEDIUM

CVSS 3.1

EPSS 0.46%

Description

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

Affected products

Vendor Tu6ge Product Oss-RS Default
n/a
- Version
  < 0.8.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tu6ge

Oss-RS

n/a

Version	Status	Constraints
< 0.8.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-7215
Advisory
https://github.com/advisories/GHSA-3w3h-7xgx-grwc
Advisory
https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29
PatchThird Party Advisory
https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc
Third Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-39397
https://rustsec.org/advisories/RUSTSEC-2022-0089.html

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-7215		Advisory
https://github.com/advisories/GHSA-3w3h-7xgx-grwc		Advisory
https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29		PatchThird Party Advisory
https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc		Third Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-39397
https://rustsec.org/advisories/RUSTSEC-2022-0089.html