CVEvulnerability

CVE-2016-0898

10.0 CRITICAL Published 2018-03-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-255, CWE-532

Description

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.

Affected configurations

• vmware pivotal software mysql 1.7.0 • vmware pivotal software mysql 1.7.0.1 • vmware pivotal software mysql 1.7.0.2 • vmware pivotal software mysql 1.7.0.3 • vmware pivotal software mysql 1.7.0.4 • vmware pivotal software mysql 1.7.1 • vmware pivotal software mysql 1.7.2 • vmware pivotal software mysql 1.7.3 • vmware pivotal software mysql 1.7.4 • vmware pivotal software mysql 1.7.5 • vmware pivotal software mysql 1.7.6 • vmware pivotal software mysql 1.7.7 • vmware pivotal software mysql 1.7.8 • vmware pivotal software mysql 1.7.9

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References