CVE-2019-11273

MEDIUM

Pivotal Software Pivotal Container Service - Log Information Exposure

Title source: rule

Description

Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information.

References (1)

[Vendor Advisory] https://pivotal.io/security/CVE-2019-11273

Scores

CVSS v3 4.3

EPSS 0.0018

EPSS Percentile 38.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-532

Status published

Affected Products (1)

pivotal_software/pivotal_container_service < 1.3.7

Timeline

Published Jul 23, 2019

Tracked Since Feb 18, 2026