CVE-2018-1223

HIGH

Pivotal Cloud Foundry Container Runtime - Log Information Exposure

Title source: rule

Description

Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. A malicious user with the ability to read the application logs could use these credentials to escalate privileges.

References (1)

Core 1

Core References

Mitigation, Vendor Advisory x_refsource_confirm

https://www.cloudfoundry.org/blog/cve-2018-1223/

Scores

CVSS v3 8.8

EPSS 0.0040

EPSS Percentile 60.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-532

Status published

Products (1)

pivotal/cloud_foundry_container_runtime < 0.14.0

Published Sep 17, 2018

Tracked Since Feb 18, 2026