Improper Access Control Affecting fosslight-prechecker package, versions [,3.0.26)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-FOSSLIGHTPRECHECKER-7361840
- published24 Jun 2024
- disclosed1 Jun 2024
- creditUnknown
Introduced: 1 Jun 2024
CVE NOT AVAILABLE CWE-284 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade fosslight-prechecker to version 3.0.26 or higher.
Overview
fosslight-prechecker is a FOSSLight Prechecker
Affected versions of this package are vulnerable to Improper Access Control. This vulnerability involved the inadvertent exposure of internal configuration details, which could be exploited by an attacker to gain access to sensitive data.