Medium severity4.3NVD Advisory· Published Oct 26, 2022· Updated Jun 17, 2026
CVE-2022-3474
CVE-2022-3474
Description
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Google LLC/Bazelv5Range: 5.0.0
Patches
Vulnerability mechanics
References
1- github.com/bazelbuild/bazel/security/advisories/GHSA-mxr8-q875-rhwqnvdThird Party Advisory
News mentions
0No linked articles in our index yet.