Description (CNA)
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Pivotal Cloud Foundry / CredHub Service Broker | affected all versions before 1.1.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.