Lucene search

K
osvGoogleOSV:CVE-2018-15797
HistoryDec 05, 2018 - 6:29 p.m.

CVE-2018-15797

2018-12-0518:29:00
Google
osv.dev
3

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.2%

Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote authenticated user with access to BOSH can obtain the admin credentials for the Cloud Foundry Platform through the logs of the NFS volume deploy errand.

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.2%

Related for OSV:CVE-2018-15797