CVE-2018-1223 — Cloud Foundry / Container Runtime

CVE-2018-1223

Cloud Foundry / Container Runtime PUBLISHED

Description (CNA)

Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.

Affected (CNA)

Vendor / product	Versions
Cloud Foundry / Container Runtime	affected unspecified before 0.14.0

CWE

No CWE identifiers supplied.

References

https://www.cloudfoundry.org/blog/cve-2018-1223/

ADP enrichment

CVE

No English description supplied.

https://www.cloudfoundry.org/blog/cve-2018-1223/