Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2018-15763

PKS leaks IaaS Credentials to Application Logs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pivotal Pivotal Container Service

  • all versions to < 1.2.0affected

References