VDB
GCVE-VVD-CLOUD-2023-0011
GCVE-VVD-CLOUD-2023-0011
Advisory Published
Palo Alto discovered that Azure CLI commands were found to leak sensitive credentials and environment variables in GitHub Actions logs.
This issue affects both public and private repositories, potentially exposing secrets to unauthorized parties.
The problem stems from the Azure CLI's design to echo back accessed/created/updated/deleted resource information, which can include sensitive data.
Later research by Orca Security revealed that AWS CLI and Google Cloud CLI were affected by the same issue, but AWS and GCP view this as expected behavior.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| AWS | Azure CLI, AWS CLI, Google Cloud CLI | — | — |
| GCP | Azure CLI, AWS CLI, Google Cloud CLI | — | — |
| Azure | Azure CLI, AWS CLI, Google Cloud CLI | — | — |
| GitHub | Cloud Services | — | — |
| AWS | ECR | — | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.