PT-2017-10378 · Cloud Foundry Foundation · Cf-Release+1

Publicado 2017-01-13 · Atualizado 2021-05-25 · CVE-2016-9882

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v250 CAPI-release versions prior to v1.12.0

Description An issue was discovered where Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log aggregator via syslog.

Recommendations For Cloud Foundry Foundation cf-release versions prior to v250, update to version v250 or later to resolve the issue. For CAPI-release versions prior to v1.12.0, update to version v1.12.0 or later to resolve the issue.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2016-9882

Produtos afetados

Capi-Release

Cf-Release

Referências · 4

• http://securityfocus.com/bid/95441 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9882 · Nota de Segurança
• https://cloudfoundry.org/cve-2016-9882 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9882 · Aviso do Fabricante