high8.8
CVE-2018-1223
Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs.
Impact
Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotal | Cloud Foundry Container Runtime | before 0.14.0 |