193 matches found
PT-2018-13189
Name of the Vulnerable Software and Affected Versions Pivotal Container Service versions prior to 1.2.0 Description The issue is an information disclosure vulnerability that exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS...
CVE-2018-1223
Cloud Foundry Container Runtime kubo-release, versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges...
CVE-2018-1223
Cloud Foundry Container Runtime kubo-release, versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges...
PT-2018-11061
Name of the Vulnerable Software and Affected Versions Cloud Foundry Container Runtime kubo-release versions prior to 0.14.0 Description The issue may cause UAA and vCenter credentials to be leaked to application logs. A malicious user who can read these logs could potentially use the leaked...
CVE-2018-1223: CFCR leaks credentials to application logs | Cloud Foundry
Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions kubo-release versions prior to 0.14.0 Description Cloud Foundry Container Runtime kubo-release, versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the...
CVE-2018-2440
Under certain circumstances SAP Dynamic Authorization Management DAM by NextLabs Java Policy Controller versions 7.7 and 8.5 exposes sensitive information in the application logs...
CVE-2018-2440
Under certain circumstances SAP Dynamic Authorization Management DAM by NextLabs Java Policy Controller versions 7.7 and 8.5 exposes sensitive information in the application logs...
PT-2018-15564
Name of the Vulnerable Software and Affected Versions SAP Dynamic Authorization Management DAM by NextLabs versions 7.7 through 8.5 Description The issue exposes sensitive information in the application logs under certain circumstances. Recommendations For versions 7.7 through 8.5, consider...
DEBIAN-CVE-2017-0361
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext...
Registration Request For Worker Was Rejected Due To An Unknown Error
New machines added to the XenDesktop Site failed to register. From the VDA Application logs it was found that the VDA wasdiscovering the Delivery Controller. On the Delivery Controller the below error is logged in the Application Event logs from Citrix Broker Service : Registration request for...
CFME: AgentController get/log application log forging
It was found that the get and log methods of the AgentController wrote log messages without sanitizing user input. A remote attacker could use this flaw to insert arbitrary content into the log files written to by AgentController...
Code injection
crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on application logs in /Library/Logs/CrashReporter/...