Wind River Support Network

Not to be fixed

LIN1021-4651 : Security Advisory - bazel - CVE-2022-3474

Created: Oct 26, 2022    Updated: Dec 6, 2022
Resolved Date: Dec 6, 2022
Found In Version:
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace


A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.

CREATE(Triage):(User=admin) CVE-2022-3474 (
Live chat