~ / search / GHSA-6rrw-4fm9-rghv

GHSA-6rrw-4fm9-rghv

Use of Hard-coded Cryptographic Key in Netmaker

Source: GitHub Advisory Database (reviewed) High CVE-2022-0664

Packages

EcosystemPackageAffectedFixed in
Go github.com/gravitl/netmaker < 0.8.5 0.8.5
Go github.com/gravitl/netmaker >= 0.9.0, < 0.9.4 0.9.4

Details

As written in the advisory (Markdown source, shown as plain text).

Netmaker prior to versions 0.8.5, 0.9.4, 0.10.0, and 0.10.1 uses a hard-coded cryptographic key.

References

External links from the advisory. They lead to third-party sites.