CVE-2016-0898
First published: Thu Mar 29 2018(Updated: )
MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Pivotal MySQL | =1.7.0 | |
| VMware Pivotal MySQL | =1.7.0.1 | |
| VMware Pivotal MySQL | =1.7.0.2 | |
| VMware Pivotal MySQL | =1.7.0.3 | |
| VMware Pivotal MySQL | =1.7.0.4 | |
| VMware Pivotal MySQL | =1.7.1 | |
| VMware Pivotal MySQL | =1.7.2 | |
| VMware Pivotal MySQL | =1.7.3 | |
| VMware Pivotal MySQL | =1.7.4 | |
| VMware Pivotal MySQL | =1.7.5 | |
| VMware Pivotal MySQL | =1.7.6 | |
| VMware Pivotal MySQL | =1.7.7 | |
| VMware Pivotal MySQL | =1.7.8 | |
| VMware Pivotal MySQL | =1.7.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2016-0898?
CVE-2016-0898 has a severity level classified as medium due to the exposure of AWS access keys in plaintext.
How does CVE-2016-0898 affect my MySQL for PCF installation?
CVE-2016-0898 specifically affects versions of MySQL for PCF tiles from 1.7.0 to 1.7.9, where AWS access keys are logged in plaintext.
How do I fix CVE-2016-0898?
To fix CVE-2016-0898, upgrade your MySQL for PCF installation to version 1.7.10 or later.
What versions are vulnerable to CVE-2016-0898?
Versions 1.7.0 through 1.7.9 of MySQL for PCF are vulnerable to CVE-2016-0898.
Are my AWS credentials safe from CVE-2016-0898?
While CVE-2016-0898 logs AWS access keys in plaintext, they are only exposed within the Service Backup component logs, not outside the VM.
- agent/weakness
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware pivotal mysql
- version/vmware pivotal mysql/1.7.0
- version/vmware pivotal mysql/1.7.0.1
- version/vmware pivotal mysql/1.7.0.2
- version/vmware pivotal mysql/1.7.0.3
- version/vmware pivotal mysql/1.7.0.4
- version/vmware pivotal mysql/1.7.1
- version/vmware pivotal mysql/1.7.2
- version/vmware pivotal mysql/1.7.3
- version/vmware pivotal mysql/1.7.4
- version/vmware pivotal mysql/1.7.5
- version/vmware pivotal mysql/1.7.6
- version/vmware pivotal mysql/1.7.7
- version/vmware pivotal mysql/1.7.8
- version/vmware pivotal mysql/1.7.9