CVE-2018-1223
First published: Fri Sep 14 2018(Updated: )
Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pivotal Cloud Foundry Container Runtime | <0.14.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2018-1223.
What is the title of this vulnerability?
The title of this vulnerability is "Cloud Foundry Container Runtime (kubo-release) versions prior to 0.14.0 may leak UAA and vCenter credentials to application logs."
What is the severity level of CVE-2018-1223?
CVE-2018-1223 has a severity level of high, with a CVSS score of 8.8.
What is the affected software for CVE-2018-1223?
The affected software is Pivotal Cloud Foundry Container Runtime versions up to exclusive 0.14.0.
How can the vulnerability be exploited?
A malicious user with the ability to read the application logs could exploit this vulnerability by leaking the UAA and vCenter credentials.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/pivotal
- canonical/pivotal cloud foundry container runtime