CVE-2018-15763 — PKS leaks IaaS Credentials to Application Logs

CVE-2018-15763

PKS leaks IaaS Credentials to Application Logs PUBLISHED

Description (CNA)

Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials.

Affected (CNA)

Vendor / product	Versions
Pivotal / Pivotal Container Service	affected all versions before 1.2.0

CWE

No CWE identifiers supplied.

References

https://pivotal.io/security/cve-2018-15763

ADP enrichment

CVE

No English description supplied.

https://pivotal.io/security/cve-2018-15763