800+ IT
News
als RSS Feed abonnieren📚 Sifchain: Private RSA key for Vagrant exposed in GitHub repository
💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vulners.com
Summary: The private RSA key used for SSH on Vagrant is exposed in sifnode GitHub repository. Steps To Reproduce: Visit this link which shows the private_key file used for your Vagrant virtual machine Suggested solution Remove the private key from the repository. Even though you remove it, it will still be in the commit history. Therefore, refer to the article by GitHub on removing sensitive data from a repository Impact By having the private SSH key published onto your GitHub repo, an attacker would be able to access your Vagrant virtual machine pretending to be you. The private key has the word "private" for reason and therefore it shouldn't be accessible by unauthorized... ...