HIGH 7.8

PYSEC-2026-828

keycloak-httpd-client-install Insecure Secrets

상세

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / keycloak-httpd-client-install

최초 영향 버전: 0 수정 버전: 0.8

수정 pip install --upgrade 'keycloak-httpd-client-install>=0.8'

참고

https://nvd.nist.gov/vuln/detail/CVE-2017-15112 [ADVISORY]
https://github.com/jdennis/keycloak-httpd-client-install/commit/c3121b271abaaa1a76de2b9ae89dacde0105cd75 [WEB]
https://access.redhat.com/errata/RHSA-2019:2137 [WEB]
https://github.com/jdennis/keycloak-httpd-client-install [PACKAGE]
https://pypi.org/project/keycloak-httpd-client-install [PACKAGE]
https://github.com/advisories/GHSA-89c9-3758-737w [ADVISORY]