CVE Vulnerabilities

CVE-2017-4955

Insertion of Sensitive Information into Log File

Published: Jun 13, 2017 | Modified: Apr 20, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Cloud_foundry_elastic_runtime Pivotal_software 1.6.0 (including) 1.6.0 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.1 (including) 1.6.1 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.2 (including) 1.6.2 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.3 (including) 1.6.3 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.4 (including) 1.6.4 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.5 (including) 1.6.5 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.6 (including) 1.6.6 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.7 (including) 1.6.7 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.8 (including) 1.6.8 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.9 (including) 1.6.9 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.10 (including) 1.6.10 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.11 (including) 1.6.11 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.12 (including) 1.6.12 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.13 (including) 1.6.13 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.14 (including) 1.6.14 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.15 (including) 1.6.15 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.16 (including) 1.6.16 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.17 (including) 1.6.17 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.18 (including) 1.6.18 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.19 (including) 1.6.19 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.20 (including) 1.6.20 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.21 (including) 1.6.21 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.22 (including) 1.6.22 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.23 (including) 1.6.23 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.24 (including) 1.6.24 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.25 (including) 1.6.25 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.26 (including) 1.6.26 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.27 (including) 1.6.27 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.28 (including) 1.6.28 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.29 (including) 1.6.29 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.30 (including) 1.6.30 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.31 (including) 1.6.31 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.32 (including) 1.6.32 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.33 (including) 1.6.33 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.34 (including) 1.6.34 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.35 (including) 1.6.35 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.36 (including) 1.6.36 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.37 (including) 1.6.37 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.38 (including) 1.6.38 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.39 (including) 1.6.39 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.40 (including) 1.6.40 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.41 (including) 1.6.41 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.42 (including) 1.6.42 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.43 (including) 1.6.43 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.44 (including) 1.6.44 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.45 (including) 1.6.45 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.46 (including) 1.6.46 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.47 (including) 1.6.47 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.48 (including) 1.6.48 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.49 (including) 1.6.49 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.50 (including) 1.6.50 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.51 (including) 1.6.51 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.52 (including) 1.6.52 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.53 (including) 1.6.53 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.54 (including) 1.6.54 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.55 (including) 1.6.55 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.56 (including) 1.6.56 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.57 (including) 1.6.57 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.58 (including) 1.6.58 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.59 (including) 1.6.59 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.60 (including) 1.6.60 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.61 (including) 1.6.61 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.62 (including) 1.6.62 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.63 (including) 1.6.63 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.6.64 (including) 1.6.64 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.1 (including) 1.7.1 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.2 (including) 1.7.2 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.3 (including) 1.7.3 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.4 (including) 1.7.4 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.5 (including) 1.7.5 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.6 (including) 1.7.6 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.7 (including) 1.7.7 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.8 (including) 1.7.8 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.9 (including) 1.7.9 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.10 (including) 1.7.10 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.11 (including) 1.7.11 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.12 (including) 1.7.12 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.13 (including) 1.7.13 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.14 (including) 1.7.14 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.15 (including) 1.7.15 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.16 (including) 1.7.16 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.17 (including) 1.7.17 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.18 (including) 1.7.18 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.19 (including) 1.7.19 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.20 (including) 1.7.20 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.21 (including) 1.7.21 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.22 (including) 1.7.22 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.23 (including) 1.7.23 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.24 (including) 1.7.24 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.25 (including) 1.7.25 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.26 (including) 1.7.26 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.27 (including) 1.7.27 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.28 (including) 1.7.28 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.29 (including) 1.7.29 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.30 (including) 1.7.30 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.31 (including) 1.7.31 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.32 (including) 1.7.32 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.33 (including) 1.7.33 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.34 (including) 1.7.34 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.35 (including) 1.7.35 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.36 (including) 1.7.36 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.37 (including) 1.7.37 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.38 (including) 1.7.38 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.39 (including) 1.7.39 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.40 (including) 1.7.40 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.41 (including) 1.7.41 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.42 (including) 1.7.42 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.43 (including) 1.7.43 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.44 (including) 1.7.44 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.45 (including) 1.7.45 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.46 (including) 1.7.46 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.7.47 (including) 1.7.47 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.1 (including) 1.8.1 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.2 (including) 1.8.2 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.3 (including) 1.8.3 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.4 (including) 1.8.4 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.5 (including) 1.8.5 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.6 (including) 1.8.6 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.7 (including) 1.8.7 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.8 (including) 1.8.8 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.9 (including) 1.8.9 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.10 (including) 1.8.10 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.11 (including) 1.8.11 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.12 (including) 1.8.12 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.13 (including) 1.8.13 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.14 (including) 1.8.14 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.15 (including) 1.8.15 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.16 (including) 1.8.16 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.17 (including) 1.8.17 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.18 (including) 1.8.18 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.19 (including) 1.8.19 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.20 (including) 1.8.20 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.21 (including) 1.8.21 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.22 (including) 1.8.22 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.23 (including) 1.8.23 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.24 (including) 1.8.24 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.25 (including) 1.8.25 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.26 (including) 1.8.26 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.8.27 (including) 1.8.27 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.9.1 (including) 1.9.1 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.9.2 (including) 1.9.2 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.9.3 (including) 1.9.3 (including)
Cloud_foundry_elastic_runtime Pivotal_software 1.9.4 (including) 1.9.4 (including)

Potential Mitigations

References