VDB
CVE-2018-15797
CVE-2018-15797
PUBLISHED
CVSS 8.399999618530273 HIGH
Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote authenticated user with access to BOSH can obtain the admin credentials for the Cloud Foundry Platform through the logs of the NFS volume deploy errand.
EPSS 1.58% · 73.1th percentile
Risk Scores
CVSS 3.0
8.399999618530273
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score
1.58%
73.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cloud Foundry | NFS Volume Release | 1.2, 1.7, 1.5 |
| pivotal_software | cloud_foundry_nfs_volume | 1.2.0, 1.7.0, 1.5.0 |
Timeline
- Dec 5, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Jan 8, 2023 EPSS Score