CVE-2018-1223: High severity Pivotal Cloud Foundry Container Runtime vulnerability

Q: What is the vulnerability ID for this security issue?

The vulnerability ID for this security issue is CVE-2018-1223.

Q: What is the title of this vulnerability?

The title of this vulnerability is "Cloud Foundry Container Runtime (kubo-release) versions prior to 0.14.0 may leak UAA and vCenter credentials to application logs."

Q: What is the severity level of CVE-2018-1223?

CVE-2018-1223 has a severity level of high, with a CVSS score of 8.8.

Q: What is the affected software for CVE-2018-1223?

The affected software is Pivotal Cloud Foundry Container Runtime versions up to exclusive 0.14.0.

Published Sep 17, 2018

Updated

Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.

Affected Software

1 affected component

Pivotal Cloud Foundry Container Runtime<0.14.0

Event History

Sep 17, 2018

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this security issue?

The vulnerability ID for this security issue is CVE-2018-1223.

What is the title of this vulnerability?

The title of this vulnerability is "Cloud Foundry Container Runtime (kubo-release) versions prior to 0.14.0 may leak UAA and vCenter credentials to application logs."

What is the severity level of CVE-2018-1223?

CVE-2018-1223 has a severity level of high, with a CVSS score of 8.8.

What is the affected software for CVE-2018-1223?

The affected software is Pivotal Cloud Foundry Container Runtime versions up to exclusive 0.14.0.

How can the vulnerability be exploited?

A malicious user with the ability to read the application logs could exploit this vulnerability by leaking the UAA and vCenter credentials.