EUVD-2019-13411

Malware in sbrugna...

EUVD-2018-7626

Malware in sbrugna...

Design/Logic Flaw

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account...

CVE-2019-3780

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account...

CVE-2019-3780

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account...

CVE-2019-3780 Cloud Foundry Container Runtime Leaks IAAS Credentials

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account...

PT-2019-16710

Name of the Vulnerable Software and Affected Versions Cloud Foundry Container Runtime versions prior to 0.28.0 Description The issue allows a malicious user with access to K8s nodes to obtain IAAS credentials, potentially escalating privileges to gain access to the IAAS account. This is due to a...

CVE-2019-3780: Password in Configuration File

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account...

CVE-2018-15763

Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials...

Information disclosure

Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials...

CVE-2018-15763 PKS leaks IaaS Credentials to Application Logs

Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials...

CVE-2018-15763

The vulnerability CVE-2018-15763 affects Pivotal Container Service (PKS) versions prior to 1.2.0. The root cause is an information disclosure that exposes IaaS credentials in application logs. An attacker with access to logs may obtain credentials and perform actions using them. A fix is to upgra...

PT-2018-13189

Name of the Vulnerable Software and Affected Versions Pivotal Container Service versions prior to 1.2.0 Description The issue is an information disclosure vulnerability that exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS...

CVE-2018-15763: Insertion of Sensitive Information into Log File

Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials...