CVE-2018-1223 Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could...
HighCVSS 8.8
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pivotal cloud foundry container runtime | < 0.14.0 | 0.14.0 |
| Cloud Foundry Container Runtime | < 0.14.0 | 0.14.0 |
References
- www.cloudfoundry.org mitigation vendor-advisory