CVE-2018-1198

Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs could escalate their privileges using this password.

Score

CVSS 3.0 8.8 High

Status

Modified - security_alert@emc.com

Published

2018-09-17

Last modified

2024-09-16

Weaknesses

CWE-532

Affected products

• Cloud Cache (Pivotal)
• Pivotal Cloud Cache (Pivotal Software)

References

• https://pivotal.io/security/cve-2018-1198