CVE-2019-11271

2019-06-1900:15:12

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.

CPENameOperatorVersion
bosheq270.1.0
bosheq270.0.0

CPE	Name	Operator	Version
	bosh	eq	270.1.0
	bosh	eq	270.0.0

References

www.cloudfoundry.org/blog/cve-2019-11271