CVE-2016-0898

CRITICAL

10.0

Beschreibung

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.

CVE Details

CVSS v3.1 Bewertung10.0

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht3/29/2018

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

vmware:pivotal_software_mysql

Schwachen (CWE)

CWE-255CWE-532

Referenzen

http://www.securityfocus.com/bid/95146(security_alert@emc.com)

https://pivotal.io/security/cve-2016-0898(security_alert@emc.com)

http://www.securityfocus.com/bid/95146(af854a3a-2127-422b-91ae-364da2661108)

https://pivotal.io/security/cve-2016-0898(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.