CVE-2016-9882 An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cl...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log aggregator via syslog.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudfoundry capi-release | <= 1.11.0 | No fix listed |
| cloudfoundry cf-release | <= 249 | No fix listed |
References
- 95441 third-party-advisory vdb-entry
- www.cloudfoundry.org mitigation patch vendor-advisory