Description (CNA)
Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cloud Foundry / BOSH | affected 270 before v270.1.1 |
CWE
CWE-532
References
ADP enrichment
No English description supplied.