PKS leaks IaaS Credentials to Application Logs
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9epss 1.0%
exploitation probability
1.0%top 39% of all CVEs
observed exploitation
nono source reports it
Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform actions using these credentials.
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Pivotal · Pivotal Container Service