An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.0 (including) | 1.6.0 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.1 (including) | 1.6.1 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.2 (including) | 1.6.2 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.3 (including) | 1.6.3 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.4 (including) | 1.6.4 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.5 (including) | 1.6.5 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.6 (including) | 1.6.6 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.7 (including) | 1.6.7 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.8 (including) | 1.6.8 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.9 (including) | 1.6.9 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.10 (including) | 1.6.10 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.11 (including) | 1.6.11 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.12 (including) | 1.6.12 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.13 (including) | 1.6.13 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.14 (including) | 1.6.14 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.15 (including) | 1.6.15 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.16 (including) | 1.6.16 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.17 (including) | 1.6.17 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.18 (including) | 1.6.18 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.19 (including) | 1.6.19 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.20 (including) | 1.6.20 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.21 (including) | 1.6.21 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.22 (including) | 1.6.22 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.23 (including) | 1.6.23 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.24 (including) | 1.6.24 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.25 (including) | 1.6.25 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.26 (including) | 1.6.26 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.27 (including) | 1.6.27 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.28 (including) | 1.6.28 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.29 (including) | 1.6.29 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.30 (including) | 1.6.30 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.31 (including) | 1.6.31 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.32 (including) | 1.6.32 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.33 (including) | 1.6.33 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.34 (including) | 1.6.34 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.35 (including) | 1.6.35 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.36 (including) | 1.6.36 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.37 (including) | 1.6.37 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.38 (including) | 1.6.38 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.39 (including) | 1.6.39 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.40 (including) | 1.6.40 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.41 (including) | 1.6.41 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.42 (including) | 1.6.42 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.43 (including) | 1.6.43 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.44 (including) | 1.6.44 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.45 (including) | 1.6.45 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.46 (including) | 1.6.46 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.47 (including) | 1.6.47 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.48 (including) | 1.6.48 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.49 (including) | 1.6.49 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.50 (including) | 1.6.50 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.51 (including) | 1.6.51 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.52 (including) | 1.6.52 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.53 (including) | 1.6.53 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.54 (including) | 1.6.54 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.55 (including) | 1.6.55 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.56 (including) | 1.6.56 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.57 (including) | 1.6.57 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.58 (including) | 1.6.58 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.59 (including) | 1.6.59 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.60 (including) | 1.6.60 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.61 (including) | 1.6.61 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.62 (including) | 1.6.62 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.63 (including) | 1.6.63 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.6.64 (including) | 1.6.64 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.1 (including) | 1.7.1 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.2 (including) | 1.7.2 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.3 (including) | 1.7.3 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.4 (including) | 1.7.4 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.5 (including) | 1.7.5 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.6 (including) | 1.7.6 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.7 (including) | 1.7.7 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.8 (including) | 1.7.8 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.9 (including) | 1.7.9 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.10 (including) | 1.7.10 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.11 (including) | 1.7.11 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.12 (including) | 1.7.12 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.13 (including) | 1.7.13 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.14 (including) | 1.7.14 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.15 (including) | 1.7.15 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.16 (including) | 1.7.16 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.17 (including) | 1.7.17 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.18 (including) | 1.7.18 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.19 (including) | 1.7.19 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.20 (including) | 1.7.20 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.21 (including) | 1.7.21 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.22 (including) | 1.7.22 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.23 (including) | 1.7.23 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.24 (including) | 1.7.24 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.25 (including) | 1.7.25 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.26 (including) | 1.7.26 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.27 (including) | 1.7.27 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.28 (including) | 1.7.28 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.29 (including) | 1.7.29 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.30 (including) | 1.7.30 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.31 (including) | 1.7.31 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.32 (including) | 1.7.32 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.33 (including) | 1.7.33 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.34 (including) | 1.7.34 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.35 (including) | 1.7.35 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.36 (including) | 1.7.36 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.37 (including) | 1.7.37 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.38 (including) | 1.7.38 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.39 (including) | 1.7.39 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.40 (including) | 1.7.40 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.41 (including) | 1.7.41 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.42 (including) | 1.7.42 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.43 (including) | 1.7.43 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.44 (including) | 1.7.44 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.45 (including) | 1.7.45 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.46 (including) | 1.7.46 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.7.47 (including) | 1.7.47 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.1 (including) | 1.8.1 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.2 (including) | 1.8.2 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.3 (including) | 1.8.3 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.4 (including) | 1.8.4 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.5 (including) | 1.8.5 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.6 (including) | 1.8.6 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.7 (including) | 1.8.7 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.8 (including) | 1.8.8 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.9 (including) | 1.8.9 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.10 (including) | 1.8.10 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.11 (including) | 1.8.11 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.12 (including) | 1.8.12 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.13 (including) | 1.8.13 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.14 (including) | 1.8.14 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.15 (including) | 1.8.15 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.16 (including) | 1.8.16 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.17 (including) | 1.8.17 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.18 (including) | 1.8.18 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.19 (including) | 1.8.19 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.20 (including) | 1.8.20 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.21 (including) | 1.8.21 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.22 (including) | 1.8.22 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.23 (including) | 1.8.23 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.24 (including) | 1.8.24 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.25 (including) | 1.8.25 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.26 (including) | 1.8.26 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.8.27 (including) | 1.8.27 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.9.1 (including) | 1.9.1 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.9.2 (including) | 1.9.2 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.9.3 (including) | 1.9.3 (including) |
| Cloud_foundry_elastic_runtime | Pivotal_software | 1.9.4 (including) | 1.9.4 (including) |
While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers. Different log files may be produced and stored for: