PT-2017-16226 · Pivotal · Pcf Elastic Runtime

Publicado 2017-06-13 · Atualizado 2019-10-03 · CVE-2017-4955

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pivotal PCF Elastic Runtime versions prior to 1.6.65 Pivotal PCF Elastic Runtime versions prior to 1.7.48 Pivotal PCF Elastic Runtime versions prior to 1.8.28 Pivotal PCF Elastic Runtime versions prior to 1.9.5

Description An issue was discovered in Pivotal PCF Elastic Runtime where several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.

Recommendations For versions prior to 1.6.65, update to version 1.6.65 or later. For versions prior to 1.7.48, update to version 1.7.48 or later. For versions prior to 1.8.28, update to version 1.8.28 or later. For versions prior to 1.9.5, update to version 1.9.5 or later.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2017-4955

Produtos afetados

Pcf Elastic Runtime

Referências · 5

• https://pivotal.io/security/cve-2017-4955 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4955 · Nota
• http://securityfocus.com/bid/97082 · Nota
• https://osv.dev/vulnerability/CVE-2017-4955 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-4955 · Nota de Segurança