VDB

GCVE-VVD-CLOUD-2023-0011

GCVE-VVD-CLOUD-2023-0011
Advisory Published
Vulnetix · Advisory published November 14, 2023
Palo Alto discovered that Azure CLI commands were found to leak sensitive credentials and environment variables in GitHub Actions logs. This issue affects both public and private repositories, potentially exposing secrets to unauthorized parties. The problem stems from the Azure CLI's design to echo back accessed/created/updated/deleted resource information, which can include sensitive data. Later research by Orca Security revealed that AWS CLI and Google Cloud CLI were affected by the same issue, but AWS and GCP view this as expected behavior.

Affected Products

VendorProductVersionsPlatforms
AWSAzure CLI, AWS CLI, Google Cloud CLI
GCPAzure CLI, AWS CLI, Google Cloud CLI
AzureAzure CLI, AWS CLI, Google Cloud CLI
GitHubCloud Services
AWSECR

References

advisory
advisory
advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›