CVE-2016-0898 MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were no...
CriticalCVSS 10.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware pivotal software mysql | = 1.7.0 | No fix listed |
| VMware pivotal software mysql | = 1.7.0.1 | No fix listed |
| VMware pivotal software mysql | = 1.7.0.2 | No fix listed |
| VMware pivotal software mysql | = 1.7.0.3 | No fix listed |
| VMware pivotal software mysql | = 1.7.0.4 | No fix listed |
| VMware pivotal software mysql | = 1.7.1 | No fix listed |
| VMware pivotal software mysql | = 1.7.2 | No fix listed |
| VMware pivotal software mysql | = 1.7.3 | No fix listed |
| VMware pivotal software mysql | = 1.7.4 | No fix listed |
| VMware pivotal software mysql | = 1.7.5 | No fix listed |
| VMware pivotal software mysql | = 1.7.6 | No fix listed |
| VMware pivotal software mysql | = 1.7.7 | No fix listed |
| VMware pivotal software mysql | = 1.7.8 | No fix listed |
| VMware pivotal software mysql | = 1.7.9 | No fix listed |
References
- 95146 third-party-advisory vdb-entry
- pivotal.io vendor-advisory