CVE-2022-1766

State: Published
Severity: Not scored
Published: Jul 20, 2022
Updated: Sep 16, 2024
Reserved: May 17, 2022

Description

Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl. Users of anchorectl version 0.1.4 should upgrade to anchorectl version 0.1.5 to resolve this issue.

Scores

The record has no CVSS score.

Weaknesses

CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
Anchore EnterpriseAnchore Inc.	before 4.0.1Affected
AnchoreCTLAnchore Inc.	before 0.1.5Affected

References

https://docs.anchore.com/current/docs/releasenotes/401/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.