PT-2017-9010

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions prior to v245 cf-mysql-release versions prior to v31 Description A command injection issue was discovered in a common script used by many Cloud Foundry components, allowing a malicious user to execute arbitrary commands ...

CVE-2016-6655: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to...

Multiple Cloud Foundry Foundation Product Command Injection Vulnerabilities

Pivotal Cloud Foundry is an open source platform-as-a-service cloud computing platform.Pivotal Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. A security vulnerability exists in Pivotal Cloud Foundry and cf-mysql that allows remote attackers to submit a special request to...

Pivotal Cloud Foundry MariaDB audit_plugin component information disclosure vulnerability

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software, Inc. in the United States. cf-mysql-release is one of the releases. mariaDB auditplugin is one of the plugins that allows operators to enable audit trails and logging sent to SQL...

CVE-2016-6653

Summary of CVE-2016-6653 (MariaDB audit_plugin in CF cf-mysql-release 27/28) The MariaDB audit_plugin integrated into PCF cf-mysql-release versions 27 and 28 can emit audit logs to syslog. A bug causes those logs to include sensitive information, potentially exposing application data and cleartex...

PT-2016-7023

Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry cf-mysql-release versions 27 through 28 Description The issue allows remote attackers to obtain sensitive information by reading syslog messages. This can include cleartext credentials, which poses a significant security...

CVE-2016-6653: Exposure of Sensitive Information to an Unauthorized Actor

The MariaDB auditplugin component in Pivotal Cloud Foundry PCF cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials...