CVE Vulnerabilities

CVE-2017-4955

Insertion of Sensitive Information into Log File

Published: Jun 13, 2017 | Modified: Apr 20, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Cloud_foundry_elastic_runtimePivotal_software1.6.0 (including)1.6.0 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.1 (including)1.6.1 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.2 (including)1.6.2 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.3 (including)1.6.3 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.4 (including)1.6.4 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.5 (including)1.6.5 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.6 (including)1.6.6 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.7 (including)1.6.7 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.8 (including)1.6.8 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.9 (including)1.6.9 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.10 (including)1.6.10 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.11 (including)1.6.11 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.12 (including)1.6.12 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.13 (including)1.6.13 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.14 (including)1.6.14 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.15 (including)1.6.15 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.16 (including)1.6.16 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.17 (including)1.6.17 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.18 (including)1.6.18 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.19 (including)1.6.19 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.20 (including)1.6.20 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.21 (including)1.6.21 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.22 (including)1.6.22 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.23 (including)1.6.23 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.24 (including)1.6.24 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.25 (including)1.6.25 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.26 (including)1.6.26 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.27 (including)1.6.27 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.28 (including)1.6.28 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.29 (including)1.6.29 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.30 (including)1.6.30 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.31 (including)1.6.31 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.32 (including)1.6.32 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.33 (including)1.6.33 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.34 (including)1.6.34 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.35 (including)1.6.35 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.36 (including)1.6.36 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.37 (including)1.6.37 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.38 (including)1.6.38 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.39 (including)1.6.39 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.40 (including)1.6.40 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.41 (including)1.6.41 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.42 (including)1.6.42 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.43 (including)1.6.43 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.44 (including)1.6.44 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.45 (including)1.6.45 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.46 (including)1.6.46 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.47 (including)1.6.47 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.48 (including)1.6.48 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.49 (including)1.6.49 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.50 (including)1.6.50 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.51 (including)1.6.51 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.52 (including)1.6.52 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.53 (including)1.6.53 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.54 (including)1.6.54 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.55 (including)1.6.55 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.56 (including)1.6.56 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.57 (including)1.6.57 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.58 (including)1.6.58 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.59 (including)1.6.59 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.60 (including)1.6.60 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.61 (including)1.6.61 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.62 (including)1.6.62 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.63 (including)1.6.63 (including)
Cloud_foundry_elastic_runtimePivotal_software1.6.64 (including)1.6.64 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.1 (including)1.7.1 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.2 (including)1.7.2 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.3 (including)1.7.3 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.4 (including)1.7.4 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.5 (including)1.7.5 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.6 (including)1.7.6 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.7 (including)1.7.7 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.8 (including)1.7.8 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.9 (including)1.7.9 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.10 (including)1.7.10 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.11 (including)1.7.11 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.12 (including)1.7.12 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.13 (including)1.7.13 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.14 (including)1.7.14 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.15 (including)1.7.15 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.16 (including)1.7.16 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.17 (including)1.7.17 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.18 (including)1.7.18 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.19 (including)1.7.19 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.20 (including)1.7.20 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.21 (including)1.7.21 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.22 (including)1.7.22 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.23 (including)1.7.23 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.24 (including)1.7.24 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.25 (including)1.7.25 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.26 (including)1.7.26 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.27 (including)1.7.27 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.28 (including)1.7.28 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.29 (including)1.7.29 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.30 (including)1.7.30 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.31 (including)1.7.31 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.32 (including)1.7.32 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.33 (including)1.7.33 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.34 (including)1.7.34 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.35 (including)1.7.35 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.36 (including)1.7.36 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.37 (including)1.7.37 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.38 (including)1.7.38 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.39 (including)1.7.39 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.40 (including)1.7.40 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.41 (including)1.7.41 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.42 (including)1.7.42 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.43 (including)1.7.43 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.44 (including)1.7.44 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.45 (including)1.7.45 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.46 (including)1.7.46 (including)
Cloud_foundry_elastic_runtimePivotal_software1.7.47 (including)1.7.47 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.1 (including)1.8.1 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.2 (including)1.8.2 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.3 (including)1.8.3 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.4 (including)1.8.4 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.5 (including)1.8.5 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.6 (including)1.8.6 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.7 (including)1.8.7 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.8 (including)1.8.8 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.9 (including)1.8.9 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.10 (including)1.8.10 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.11 (including)1.8.11 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.12 (including)1.8.12 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.13 (including)1.8.13 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.14 (including)1.8.14 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.15 (including)1.8.15 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.16 (including)1.8.16 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.17 (including)1.8.17 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.18 (including)1.8.18 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.19 (including)1.8.19 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.20 (including)1.8.20 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.21 (including)1.8.21 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.22 (including)1.8.22 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.23 (including)1.8.23 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.24 (including)1.8.24 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.25 (including)1.8.25 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.26 (including)1.8.26 (including)
Cloud_foundry_elastic_runtimePivotal_software1.8.27 (including)1.8.27 (including)
Cloud_foundry_elastic_runtimePivotal_software1.9.1 (including)1.9.1 (including)
Cloud_foundry_elastic_runtimePivotal_software1.9.2 (including)1.9.2 (including)
Cloud_foundry_elastic_runtimePivotal_software1.9.3 (including)1.9.3 (including)
Cloud_foundry_elastic_runtimePivotal_software1.9.4 (including)1.9.4 (including)

Potential Mitigations

References