Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vhwm-f423-2fx6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.

Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.

EPSS

Процентиль: 44%
0.00215
Низкий

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 6.5
nvd
почти 5 лет назад

Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller.

EPSS

Процентиль: 44%
0.00215
Низкий

Дефекты

CWE-522