CVE-2018-15763: PKS leaks IaaS Credentials to Application Logs
Published Oct 5, 2018
·Updated
Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials.
Affected Software
1 affected component
Pivotal Software Pivotal Container Service<1.2
Event History
Oct 5, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2018-15763?
CVE-2018-15763 is an information disclosure vulnerability in Pivotal Container Service versions prior to 1.2.0.
2
How severe is CVE-2018-15763?
CVE-2018-15763 has a severity rating of 8.8, which is considered critical.
3
How does CVE-2018-15763 expose IaaS credentials?
CVE-2018-15763 exposes IaaS credentials by including them in application logs.
4
Who can exploit CVE-2018-15763?
A malicious user with access to application logs can exploit CVE-2018-15763.
5
Is there a fix for CVE-2018-15763?
Yes, upgrading to Pivotal Container Service version 1.2.0 or later fixes CVE-2018-15763.