An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPivotal Software Cloud Foundry Elastic Runtime
APPPivotal Software1.6.01.6.11.6.101.6.111.6.121.6.131.6.141.6.151.6.161.6.171.6.181.6.191.6.21.6.201.6.21+ 85 more
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2016-6658CRITICAL9.6PL ✓same product
Ujawnienie danych uwierzytelniających buildpack w Cloud Foundry CF-Release
CVE-2015-5172CRITICAL9.8PL ✓same product
Cloud Foundry: brak wygasania linków resetowania hasła
CVE-2015-5171CRITICAL9.8PL ✓same product
Cloud Foundry: brak unieważniania sesji po zmianie hasła
CVE-2017-2773CRITICAL9.8PL ✓same product
Pivotal PCF Elastic Runtime — podszywanie się pod użytkowników przez błąd walidacji JWT
CVE-2016-0761CRITICAL9.8PL ✓same product
Podatność path traversal w Cloud Foundry Garden-Linux przy obsłudze obrazów Docker