CVE-2018-1198

2018-09-1716:00:00

dell

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs could escalate their privileges using this password.

CNA Affected

[
  {
    "product": "Cloud Cache",
    "vendor": "Pivotal",
    "versions": [
      {
        "lessThan": "1.31",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

pivotal.io/security/cve-2018-1198