CVE-2024-8135

Katalog CVE

CVSS 9.8 · Critical EPSS 0,55%

Kerentanan Use of Hard-coded Credentials pada gotribe. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is identified as 4fb9b9e80a2beedd09d9fde4b9cf5bd510baf18f. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

24 Agustus 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Go-Tribe/gotribe/commit/4fb9b9e80a2beedd09d9fde4b9cf5bd510baf18f patch
• https://vuldb.com/?submit.396310 advisory pihak ketiga · vdb entry
• https://github.com/Go-Tribe/gotribe/issues/1 issue tracking
• https://github.com/Go-Tribe/gotribe/issues/1#issuecomment-2307205980 issue tracking
• https://vuldb.com/?ctiid.275706 permissions required · vdb entry
• https://vuldb.com/?id.275706 permissions required · vdb entry