CVE-2022-3474 — Bazel leaks user credentials through the remote assets API
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requ…
Published: 2022-10-26 · CVSS: 5.1 · CVSS 4.0
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7