{"action":"Upgrade cloudtoken to 0.1.24 or later.","affected":[{"fixed":"0.1.24","introduced":"0.1.1"}],"component":"cloudtoken","cve_ids":["CVE-2018-13390"],"ecosystem":"PyPI","epss":0.00467,"exploited":false,"fixed_versions":["0.1.24"],"ghsa_id":"GHSA-4fpg-j5mp-783g","id":"tcs_01M5KEY2BT54XQCZGE2AFEY4KN","modified_at":"2024-09-13T16:06:21.237625Z","published_at":"2022-05-13T01:49:46Z","references":["https://osv.dev/vulnerability/GHSA-4fpg-j5mp-783g","https://nvd.nist.gov/vuln/detail/CVE-2018-13390","https://bitbucket.org/atlassian/cloudtoken/wiki/CVE-2018-13390%20-%20Exposed%20credentials%20in%20daemon%20mode%20on%20Linux","https://github.com/pypa/advisory-database/tree/main/vulns/cloudtoken/PYSEC-2018-1.yaml"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4fpg-j5mp-783g","url":"https://osv.dev/vulnerability/GHSA-4fpg-j5mp-783g"}],"summary":"Cloudtoken Insufficiently Protects Credentials"}