Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Coder logged sensitive objects unsanitized
Vulnerability Description
Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace (VM, K8s Pod etc.) or a third-party system (SIEM, logging stack) could access those logs. This vulnerability is fixed in 2.26.5, 2.27.7, and 2.28.4.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
通过日志文件的信息暴露
Vulnerability Title
Coder 日志信息泄露漏洞
Vulnerability Description
Coder是Coder公司的一个可以在公共或私有云基础设施中设置开发环境的应用程序。 Coder 2.26.5版本、2.27.7版本和2.28.4版本之前版本存在日志信息泄露漏洞，该漏洞源于工作空间代理清单以明文记录敏感值，可能导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A