-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from insecure logging of DockerBuildArgs during the 'sam build' process. The DockerClient.build function is a core component responsible for executing Docker commands, and it would naturally log the build arguments for debugging. The BuildCommand._build_function orchestrates the build process and would handle parameter propagation. Both are logical points where sensitive data could be leaked via unredacted logging. The confidence is high for DockerClient.build due to its direct role in Docker command execution, and medium for BuildCommand._build_function due to indirect involvement in parameter handling.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| aws-sam-cli | pip | < 1.122.0 | 1.122.0 |