CVE-2017-4955

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
pivotal_softwarecloud_foundry_elastic_runtime
1.6.0
pivotal_softwarecloud_foundry_elastic_runtime
1.6.1
pivotal_softwarecloud_foundry_elastic_runtime
1.6.2
pivotal_softwarecloud_foundry_elastic_runtime
1.6.3
pivotal_softwarecloud_foundry_elastic_runtime
1.6.4
pivotal_softwarecloud_foundry_elastic_runtime
1.6.5
pivotal_softwarecloud_foundry_elastic_runtime
1.6.6
pivotal_softwarecloud_foundry_elastic_runtime
1.6.7
pivotal_softwarecloud_foundry_elastic_runtime
1.6.8
pivotal_softwarecloud_foundry_elastic_runtime
1.6.9
pivotal_softwarecloud_foundry_elastic_runtime
1.6.10
pivotal_softwarecloud_foundry_elastic_runtime
1.6.11
pivotal_softwarecloud_foundry_elastic_runtime
1.6.12
pivotal_softwarecloud_foundry_elastic_runtime
1.6.13
pivotal_softwarecloud_foundry_elastic_runtime
1.6.14
pivotal_softwarecloud_foundry_elastic_runtime
1.6.15
pivotal_softwarecloud_foundry_elastic_runtime
1.6.16
pivotal_softwarecloud_foundry_elastic_runtime
1.6.17
pivotal_softwarecloud_foundry_elastic_runtime
1.6.18
pivotal_softwarecloud_foundry_elastic_runtime
1.6.19
pivotal_softwarecloud_foundry_elastic_runtime
1.6.20
pivotal_softwarecloud_foundry_elastic_runtime
1.6.21
pivotal_softwarecloud_foundry_elastic_runtime
1.6.22
pivotal_softwarecloud_foundry_elastic_runtime
1.6.23
pivotal_softwarecloud_foundry_elastic_runtime
1.6.24
pivotal_softwarecloud_foundry_elastic_runtime
1.6.25
pivotal_softwarecloud_foundry_elastic_runtime
1.6.26
pivotal_softwarecloud_foundry_elastic_runtime
1.6.27
pivotal_softwarecloud_foundry_elastic_runtime
1.6.28
pivotal_softwarecloud_foundry_elastic_runtime
1.6.29
pivotal_softwarecloud_foundry_elastic_runtime
1.6.30
pivotal_softwarecloud_foundry_elastic_runtime
1.6.31
pivotal_softwarecloud_foundry_elastic_runtime
1.6.32
pivotal_softwarecloud_foundry_elastic_runtime
1.6.33
pivotal_softwarecloud_foundry_elastic_runtime
1.6.34
pivotal_softwarecloud_foundry_elastic_runtime
1.6.35
pivotal_softwarecloud_foundry_elastic_runtime
1.6.36
pivotal_softwarecloud_foundry_elastic_runtime
1.6.37
pivotal_softwarecloud_foundry_elastic_runtime
1.6.38
pivotal_softwarecloud_foundry_elastic_runtime
1.6.39
pivotal_softwarecloud_foundry_elastic_runtime
1.6.40
pivotal_softwarecloud_foundry_elastic_runtime
1.6.41
pivotal_softwarecloud_foundry_elastic_runtime
1.6.42
pivotal_softwarecloud_foundry_elastic_runtime
1.6.43
pivotal_softwarecloud_foundry_elastic_runtime
1.6.44
pivotal_softwarecloud_foundry_elastic_runtime
1.6.45
pivotal_softwarecloud_foundry_elastic_runtime
1.6.46
pivotal_softwarecloud_foundry_elastic_runtime
1.6.47
pivotal_softwarecloud_foundry_elastic_runtime
1.6.48
pivotal_softwarecloud_foundry_elastic_runtime
1.6.49
pivotal_softwarecloud_foundry_elastic_runtime
1.6.50
pivotal_softwarecloud_foundry_elastic_runtime
1.6.51
pivotal_softwarecloud_foundry_elastic_runtime
1.6.52
pivotal_softwarecloud_foundry_elastic_runtime
1.6.53
pivotal_softwarecloud_foundry_elastic_runtime
1.6.54
pivotal_softwarecloud_foundry_elastic_runtime
1.6.55
pivotal_softwarecloud_foundry_elastic_runtime
1.6.56
pivotal_softwarecloud_foundry_elastic_runtime
1.6.57
pivotal_softwarecloud_foundry_elastic_runtime
1.6.58
pivotal_softwarecloud_foundry_elastic_runtime
1.6.59
pivotal_softwarecloud_foundry_elastic_runtime
1.6.60
pivotal_softwarecloud_foundry_elastic_runtime
1.6.61
pivotal_softwarecloud_foundry_elastic_runtime
1.6.62
pivotal_softwarecloud_foundry_elastic_runtime
1.6.63
pivotal_softwarecloud_foundry_elastic_runtime
1.6.64
pivotal_softwarecloud_foundry_elastic_runtime
1.7.1
pivotal_softwarecloud_foundry_elastic_runtime
1.7.2
pivotal_softwarecloud_foundry_elastic_runtime
1.7.3
pivotal_softwarecloud_foundry_elastic_runtime
1.7.4
pivotal_softwarecloud_foundry_elastic_runtime
1.7.5
pivotal_softwarecloud_foundry_elastic_runtime
1.7.6
pivotal_softwarecloud_foundry_elastic_runtime
1.7.7
pivotal_softwarecloud_foundry_elastic_runtime
1.7.8
pivotal_softwarecloud_foundry_elastic_runtime
1.7.9
pivotal_softwarecloud_foundry_elastic_runtime
1.7.10
pivotal_softwarecloud_foundry_elastic_runtime
1.7.11
pivotal_softwarecloud_foundry_elastic_runtime
1.7.12
pivotal_softwarecloud_foundry_elastic_runtime
1.7.13
pivotal_softwarecloud_foundry_elastic_runtime
1.7.14
pivotal_softwarecloud_foundry_elastic_runtime
1.7.15
pivotal_softwarecloud_foundry_elastic_runtime
1.7.16
pivotal_softwarecloud_foundry_elastic_runtime
1.7.17
pivotal_softwarecloud_foundry_elastic_runtime
1.7.18
pivotal_softwarecloud_foundry_elastic_runtime
1.7.19
pivotal_softwarecloud_foundry_elastic_runtime
1.7.20
pivotal_softwarecloud_foundry_elastic_runtime
1.7.21
pivotal_softwarecloud_foundry_elastic_runtime
1.7.22
pivotal_softwarecloud_foundry_elastic_runtime
1.7.23
pivotal_softwarecloud_foundry_elastic_runtime
1.7.24
pivotal_softwarecloud_foundry_elastic_runtime
1.7.25
pivotal_softwarecloud_foundry_elastic_runtime
1.7.26
pivotal_softwarecloud_foundry_elastic_runtime
1.7.27
pivotal_softwarecloud_foundry_elastic_runtime
1.7.28
pivotal_softwarecloud_foundry_elastic_runtime
1.7.29
pivotal_softwarecloud_foundry_elastic_runtime
1.7.30
pivotal_softwarecloud_foundry_elastic_runtime
1.7.31
pivotal_softwarecloud_foundry_elastic_runtime
1.7.32
pivotal_softwarecloud_foundry_elastic_runtime
1.7.33
pivotal_softwarecloud_foundry_elastic_runtime
1.7.34
pivotal_softwarecloud_foundry_elastic_runtime
1.7.35
pivotal_softwarecloud_foundry_elastic_runtime
1.7.36
pivotal_softwarecloud_foundry_elastic_runtime
1.7.37
pivotal_softwarecloud_foundry_elastic_runtime
1.7.38
pivotal_softwarecloud_foundry_elastic_runtime
1.7.39
pivotal_softwarecloud_foundry_elastic_runtime
1.7.40
pivotal_softwarecloud_foundry_elastic_runtime
1.7.41
pivotal_softwarecloud_foundry_elastic_runtime
1.7.42
pivotal_softwarecloud_foundry_elastic_runtime
1.7.43
pivotal_softwarecloud_foundry_elastic_runtime
1.7.44
pivotal_softwarecloud_foundry_elastic_runtime
1.7.45
pivotal_softwarecloud_foundry_elastic_runtime
1.7.46
pivotal_softwarecloud_foundry_elastic_runtime
1.7.47
pivotal_softwarecloud_foundry_elastic_runtime
1.8.1
pivotal_softwarecloud_foundry_elastic_runtime
1.8.2
pivotal_softwarecloud_foundry_elastic_runtime
1.8.3
pivotal_softwarecloud_foundry_elastic_runtime
1.8.4
pivotal_softwarecloud_foundry_elastic_runtime
1.8.5
pivotal_softwarecloud_foundry_elastic_runtime
1.8.6
pivotal_softwarecloud_foundry_elastic_runtime
1.8.7
pivotal_softwarecloud_foundry_elastic_runtime
1.8.8
pivotal_softwarecloud_foundry_elastic_runtime
1.8.9
pivotal_softwarecloud_foundry_elastic_runtime
1.8.10
pivotal_softwarecloud_foundry_elastic_runtime
1.8.11
pivotal_softwarecloud_foundry_elastic_runtime
1.8.12
pivotal_softwarecloud_foundry_elastic_runtime
1.8.13
pivotal_softwarecloud_foundry_elastic_runtime
1.8.14
pivotal_softwarecloud_foundry_elastic_runtime
1.8.15
pivotal_softwarecloud_foundry_elastic_runtime
1.8.16
pivotal_softwarecloud_foundry_elastic_runtime
1.8.17
pivotal_softwarecloud_foundry_elastic_runtime
1.8.18
pivotal_softwarecloud_foundry_elastic_runtime
1.8.19
pivotal_softwarecloud_foundry_elastic_runtime
1.8.20
pivotal_softwarecloud_foundry_elastic_runtime
1.8.21
pivotal_softwarecloud_foundry_elastic_runtime
1.8.22
pivotal_softwarecloud_foundry_elastic_runtime
1.8.23
pivotal_softwarecloud_foundry_elastic_runtime
1.8.24
pivotal_softwarecloud_foundry_elastic_runtime
1.8.25
pivotal_softwarecloud_foundry_elastic_runtime
1.8.26
pivotal_softwarecloud_foundry_elastic_runtime
1.8.27
pivotal_softwarecloud_foundry_elastic_runtime
1.9.1
pivotal_softwarecloud_foundry_elastic_runtime
1.9.2
pivotal_softwarecloud_foundry_elastic_runtime
1.9.3
pivotal_softwarecloud_foundry_elastic_runtime
1.9.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/97082
https://pivotal.io/security/cve-2017-4955
http://www.securityfocus.com/bid/97082
https://pivotal.io/security/cve-2017-4955