CVE:CVE-2023-34236
CNNVD:CNNVD-202307-1324
Weaveworks Weave GitOps是英国Weaveworks公司的一个简单的开源开发者平台。
Weave GitOps Terraform Controller (Weave TF-controller) v0.14.3及之前版本、v0.15.0-rc.4及之前版本存在信息泄露漏洞，该漏洞源于Weave GitOps Terraform Runners ( tf-runner)，其中敏感数据被无意中打印 - 可能会泄露其 Pod 日志中的用户敏感数据。
solution:Upgrade weave gitops_terraform_controller to a higher version than 0.14.4,0.15.0:rc1,0.15.0:rc2,0.15.0:rc3,0.15.0:rc4,and avoid the version (,0.14.4),0.15.0:rc1,0.15.0:rc2,0.15.0:rc3,0.15.0:rc4