CVE-2016-6653

EUVD-2016-7556
The MariaDB audit_plugin component in Pivotal Cloud Foundry (PCF) cf-mysql-release 27 and 28 allows remote attackers to obtain sensitive information by reading syslog messages, as demonstrated by cleartext credentials.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
pivotal_softwarecloud_foundry_cf_mysql
27.0
pivotal_softwarecloud_foundry_cf_mysql
28.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/93480
https://pivotal.io/security/cve-2016-6653
http://www.securityfocus.com/bid/93480
https://pivotal.io/security/cve-2016-6653