CVE Catalog

CVE-2024-50349

Medium
Published: Translated: NVD NIST

Summary

When Git asks for credentials via a terminal prompt (without using a credential helper), it prints the host name for which the credentials are requested. This may lead to unintended disclosure of the host name.

Risk Assessment

Risk of exposing infrastructure information, which may facilitate targeted attacks.

Recommendation

Update Git to a patched version and consider using credential helpers.

Original NVD description (English source)

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out the host name for which

Vulnerability data from NVD (NIST) · CISA KEV · EPSS