Lucene search
PivotalCVELIST:CVE-2020-5422HistoryOct 01, 2020 - 12:00 a.m.
CVE-2020-5422 UAA password may appear in BOSH System Metrics Server process arguments
2020-10-0100:00:00
CWE-214
pivotal
www.cve.org
0.001 Low
EPSS
Percentile
28.6%
BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).
CNA Affected
[
{
"product": "BOSH System Metrics Server",
"vendor": "Cloud Foundry",
"versions": [
{
"lessThan": "0.1.0",
"status": "affected",
"version": "All",
"versionType": "custom"
}
]
}
]References
Related
cve
cve
CVE-2020-5422
2020-10-02 17:15:12
cloudfoundry
cloudfoundry
prion
prion
Default credentials
2020-10-02 17:15:00
osv
osv
CVE-2020-5422
2020-10-02 17:15:12
nvd
nvd
CVE-2020-5422
2020-10-02 17:15:12