Lucene search

[email protected]CVE-2016-0898

HistoryMar 29, 2018 - 10:29 p.m.

CVE-2016-0898

2018-03-2922:29:00

CWE-255

CWE-532

[email protected]

web.nvd.nist.gov

cve-2016-0898

mysql

pcf

aws

plaintext

security vulnerability

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.6%

JSON

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.

Affected configurations

NVD

Node

vmwarepivotal_software_mysqlMatch1.7.0pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.0.1pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.0.2pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.0.3pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.0.4pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.1pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.2pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.3pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.4pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.5pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.6pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.7pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.8pcf_tiles

vmwarepivotal_software_mysqlMatch1.7.9pcf_tiles

CPENameOperatorVersion
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.0
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.0.1
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.0.2
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.0.3
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.0.4
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.1
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.2
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.3
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.4
vmware:pivotal_software_mysqlvmware pivotal software mysqleq1.7.5

CPE	Name	Operator	Version
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.0
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.0.1
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.0.2
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.0.3
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.0.4
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.1
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.2
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.3
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.4
vmware:pivotal_software_mysql	vmware pivotal software mysql	eq	1.7.5

Rows per page:

1-10 of 141

References

www.securityfocus.com/bid/95146

pivotal.io/security/cve-2016-0898

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

59.6%

JSON

Related for CVE-2016-0898

prion1 cvelist1 nvd1