CVE-2017-14390: High severity pivotal software cf-deployment vulnerability
In Cloud Foundry Foundation cf-deployment v0.35.0, a misconfiguration with Loggregator and syslog-drain causes logs to be drained to unintended locations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14390?
CVE-2017-14390 is classified as a moderate severity vulnerability due to its potential impact on log management.
How do I fix CVE-2017-14390?
To fix CVE-2017-14390, ensure proper configuration of Loggregator and syslog-drain to prevent logs from being sent to unintended locations.
What software is affected by CVE-2017-14390?
CVE-2017-14390 affects the Cloud Foundry Foundation cf-deployment version 0.35.0.
What are the consequences of CVE-2017-14390?
The consequences of CVE-2017-14390 include potential exposure of sensitive logs to unauthorized locations, compromising data privacy.
How can I verify if my deployment is vulnerable to CVE-2017-14390?
You can verify vulnerability to CVE-2017-14390 by checking your cf-deployment configuration and confirming if Loggregator and syslog-drain are misconfigured.