Design/Logic Flaw

2018-03-2922:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.8%

JSON

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.

CPENameOperatorVersion
pivotal_software_mysqleq1.7.0
pivotal_software_mysqleq1.7.0.1
pivotal_software_mysqleq1.7.0.2
pivotal_software_mysqleq1.7.0.3
pivotal_software_mysqleq1.7.0.4
pivotal_software_mysqleq1.7.1
pivotal_software_mysqleq1.7.2
pivotal_software_mysqleq1.7.3
pivotal_software_mysqleq1.7.4
pivotal_software_mysqleq1.7.5

Name	Operator	Version
pivotal_software_mysql	eq	1.7.0
pivotal_software_mysql	eq	1.7.0.1
pivotal_software_mysql	eq	1.7.0.2
pivotal_software_mysql	eq	1.7.0.3
pivotal_software_mysql	eq	1.7.0.4
pivotal_software_mysql	eq	1.7.1
pivotal_software_mysql	eq	1.7.2
pivotal_software_mysql	eq	1.7.3
pivotal_software_mysql	eq	1.7.4
pivotal_software_mysql	eq	1.7.5