9.8

CVE-2017-4955

EPSS 0.41%
Published 13.06.2017 06:29:00
Last modified 20.04.2025 01:37:25
Source security_alert@emc.com
Teams watchlist Login
Open Login

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.0

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.1

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.2

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.3

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.4

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.5

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.6

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.7

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.8

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.9

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.10

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.11

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.12

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.13

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.14

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.15

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.16

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.17

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.18

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.19

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.20

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.21

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.22

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.23

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.24

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.25

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.26

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.27

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.28

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.29

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.30

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.31

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.32

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.33

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.34

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.35

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.36

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.37

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.38

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.39

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.40

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.41

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.42

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.43

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.44

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.45

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.46

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.47

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.48

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.49

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.50

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.51

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.52

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.53

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.54

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.55

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.56

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.57

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.58

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.59

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.60

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.61

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.62

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.63

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.6.64

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.1

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.2

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.3

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.4

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.5

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.6

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.7

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.8

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.9

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.10

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.11

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.12

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.13

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.14

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.15

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.16

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.17

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.18

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.19

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.20

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.21

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.22

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.23

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.24

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.25

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.26

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.27

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.28

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.29

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.30

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.31

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.32

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.33

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.34

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.35

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.36

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.37

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.38

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.39

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.40

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.41

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.42

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.43

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.44

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.45

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.46

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.7.47

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.1

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.2

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.3

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.4

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.5

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.6

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.7

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.8

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.9

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.10

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.11

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.12

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.13

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.14

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.15

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.16

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.17

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.18

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.19

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.20

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.21

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.22

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.23

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.24

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.25

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.26

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.8.27

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.9.1

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.9.2

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.9.3

Pivotal Software ≫ Cloud Foundry Elastic Runtime Version1.9.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.41%	0.584

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-532 Insertion of Sensitive Information into Log File

The product writes sensitive information to a log file.

http://www.securityfocus.com/bid/97082

Third Party Advisory

VDB Entry

https://pivotal.io/security/cve-2017-4955

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2017-4955

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-4955

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-4955

EUVD