CVE-2018-1223

Description

Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.

Reserved 2017-12-06 | Published 2018-09-17 | Updated 2024-09-16 | Assigner dell

Problem types

Credential leak to logs

Product status

Any version before 0.14.0
affected

References

www.cloudfoundry.org/blog/cve-2018-1223/

cve.org (CVE-2018-1223)

nvd.nist.gov (CVE-2018-1223)

Download JSON