CVE-2022-1766CWE-522

Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials

published July 20, 2022

CVSS
—
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl. Users of anchorectl version 0.1.4 should upgrade to anchorectl version 0.1.5 to resolve this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.6th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-07-20T16:10Z
EPSS history
Timeline
  • 20 JUL 16:10Z
    Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials
    cvelistv5