critical9.8
CVE-2016-5006
The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential inf…
Impact
The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotal Software | Cloud Foundry | through 238.0 |
| Pivotal Software | Cloud Foundry Elastic Runtime | through 1.6.32 Versions 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4 |