Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8jpp-7p79-w764

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Cloud Foundry BOSH 267.x versions prior to v267.14.0, and BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.

Cloud Foundry BOSH 267.x versions prior to v267.14.0, and BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.

EPSS

Процентиль: 13%
0.00044
Низкий

7.8 High

CVSS3

Дефекты

CWE-522
CWE-532

Связанные уязвимости

CVSS3: 7.8
nvd
больше 6 лет назад

Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.

EPSS

Процентиль: 13%
0.00044
Низкий

7.8 High

CVSS3

Дефекты

CWE-522
CWE-532