CVE-2024-6388: Sensitive Cmdline Argument Cwe214
Sensitive information such as tokens, passwords, or credentials was passed directly as a command-line argument. Command-line arguments are exposed system-wide via the process list (e.g., `/proc/[pid]/cmdline` or `ps`), allowing any local unprivileged user to observe the sensitive data. To remediate this, pass sensitive information via environment variables,
Cβgreprules fetch cve-2024-6388-sensitive-cmdline-argument-cwe214 --engine opengrepDescription
Sensitive information such as tokens, passwords, or credentials was passed directly as a command-line argument. Command-line arguments are exposed system-wide via the process list (e.g., `/proc/[pid]/cmdline` or `ps`), allowing any local unprivileged user to observe the sensitive data. To remediate this, pass sensitive information via environment variables,
Community feedback
0 signals from signed-in users.
- Useful
- 0
- False positive
- 0
- Metadata
- 0