Vulnerability Details CVE-2022-1766
Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl. Users of anchorectl version 0.1.4 should upgrade to anchorectl version 0.1.5 to resolve this issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.5%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2022-1766
-
cpe:2.3:a:anchore:anchore:2.0.0
-
cpe:2.3:a:anchore:anchore:2.1.0
-
cpe:2.3:a:anchore:anchore:2.2.0
-
cpe:2.3:a:anchore:anchore:2.3.0
-
cpe:2.3:a:anchore:anchore:2.3.1
-
cpe:2.3:a:anchore:anchore:2.3.2
-
cpe:2.3:a:anchore:anchore:2.4.0
-
cpe:2.3:a:anchore:anchore:2.4.1
-
cpe:2.3:a:anchore:anchore:3.0.0
-
cpe:2.3:a:anchore:anchore:3.0.1
-
cpe:2.3:a:anchore:anchore:3.0.2
-
cpe:2.3:a:anchore:anchore:3.0.3
-
cpe:2.3:a:anchore:anchore:3.1.0
-
cpe:2.3:a:anchore:anchore:3.1.1
-
cpe:2.3:a:anchore:anchore:3.1.2
-
cpe:2.3:a:anchore:anchore:3.2.0
-
cpe:2.3:a:anchore:anchore:3.2.1
-
cpe:2.3:a:anchore:anchore:3.3.0
-
cpe:2.3:a:anchore:anchore:4.0.0
-
cpe:2.3:a:anchore:anchorectl:0.1.4