Name of the Vulnerable Software and Affected Versions openwhisk versions prior to 3.3.1

Description The issue allows for remote memory exposure. When a number is passed to the api key variable, affected versions of openwhisk allocate an uninitialized buffer and send it over the network in the Authorization header, which is base64-encoded.

Recommendations Update to version 3.3.1 or later.